How to use
curlftpfs, in a secure way? I mean without having FTP password in plaintext and world-readable.
I ask this because
curlftpfs works running a command like that:
curlftpfs HOST /mnt/path -o user=USERNAME:PASSWORD
Unfortunately this has security concerns since your password will be shown in plaintext in the process list.
Moreover, if you want to mount the FTP directory at startup, you are tempted to use
/etc/fstab but I have to remember that this has security concerns too because that file usually is not designed to keep secrets since it's
-rw-r--r-- so the last line in
/etc/fstab will be world-readable:
/dev/mapper/centos-home /home xfs defaults 0 0 /dev/mapper/centos-swap swap swap defaults 0 0 curlftpfs#USERNAME:PASSWORD@HOST /mnt/path fuse rw,noauto 0 0
Additionally, the official manual (
man 1 curlftpfs) does not describe any parameter to pass credentials in a different way and does not say much more. Moreover, somebody asked how to mount an FTP directory using curlftpfs but at the moment the answer says to put them in plaintext and world-readable (that as already said may be not good for you).
Additionally, the official manual says something about reading more details on another man page but at the moment that man page is not available in Centos 7. Maybe a documentation bug?
curlftpfs is powered by libcurl for all transfer-related features. See libcurl(3) for details. The filesystem part is implemented on top of FUSE. See http://fuse.sourceforge.net/ for details.
man 1 curlftpfs
$ yum install -y libcurl $ man libcurl No manual entry for libcurl
How do people use
curlftpfs safely (without plaintext and world-readable password) in whatever normal shared system?