I have a small bash script which downloads a critical file, opens an SFPT connection, puts the file and closes the connection.
As you can imagine, my script has some username and password information to it.
I plan on making those sensitive bits of information environment variables so incase we get hacked that information will not be exposed.
However, I wonder if:
- the environment variables approach is the best solution
- the variables will be permanent and survive server resets, crashes etc
- if my environment variables will be visible to other terminal non-root users
Thanks for your input in advance ... happy new year.