X-Spam-Check-By: sourceware.org
Message-ID: <4392D119.7080409@wpkg.org>
Date: Sun, 04 Dec 2005 12:20:57 +0100
From: Tomasz Chmielewski <mangoo AT wpkg DOT org>
User-Agent: Mozilla Thunderbird 1.0.7-3mdk (X11/20051015)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: encoding scripts (so that user can't see passwords easily)?
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

I have a little open-source project, which eases Windows administration 
a bit.

In some of the scripts, I use usernames and passwords (to get to a 
password-protected network share etc.).
Because they are scripts, username and password is in plain.

Although the script files are only readable by SYSTEM and 
Administrators, if a disk is stolen, someone could easily get the 
passwords by doing simple "grep -r password ./*".

Do you know some tool which could "encode" scripts?

One of such "similar" tools is Microsoft Script Encoder, but perhaps 
it's licensing wouldn't allow me to distribute it along with my files.

That's actually how I discovered Cygwin - I had to replace srvany.exe, 
(which I couldn't distribute), and I found cygrunsrv :)


-- 
Tomek
http://wpkg.org
WPKG - software deployment and upgrades with Samba

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/