On Friday, 08/30/2013 at 02:10 EDT, "Emmett O'Grady" <[email protected]>
wrote:
> You can enter this criteria into the .netrc in addition to script
variables.
> FTP should pull the username and password when it matches the hostname
in your
> ftp statement to the hostname in the .netrc file.
>
> Permission to read that file should be restricted to the owner only.

You *could* as long as you don't have a security policy that prohibits
clear-text passwords from being stored on disk.  Deviations are usually
permitted only for unattended automation processes.  And even then I
wouldn't put it in .netrc unless I am copying and unhashing another file
as .netrc at run time and erase .netrc when done.  Intruders will look for
are any .netrc files.

Alan Altmark

Senior Managing z/VM and Linux Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
[email protected]
IBM Endicott

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Reply via email to