2 ms·
If a root exploit is leveraged, then /proc/*/environ of all processes is visible to the adversary. The classical alternative has been to store (FTP) credential
by chasil 1y ago
If a root exploit is leveraged, then /proc/*/environ of all processes is visible to the adversary.
The classical alternative has been to store (FTP) credentials in a .netrc file (also used by curl).
I have some custom code to pull passwords out of a SQLite database.
For people who are really concerned with this, a "secrecy manger" is more appropriate, such as Cyberark conjur and summon, or Hashicorp Vault.
- jkrejcha 1y agoIf a full root exploit is leveraged, it's already game over already, basically anything at that point is just going to be rearranging deck chairs.
- robertlagrant 1y ago> If a root exploit is leveraged, then /proc/*/environ of all processes is visible to the adversary. > The classical alternative has been to store (FTP) credentials in a .netrc file (also used by curl). You're not suggesting that a netrc file would stop a root exploit?