Title: RE: host from SQL> prompt

Thanks to all that replied...inserting into PRODUCT_USER_PROFILE does the trick!

-----Original Message-----
From: Pass Stephanie [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 21, 2002 4:27 PM
To: Multiple recipients of list ORACLE-L
Subject: RE: host from SQL> prompt


Product profile has worked to stop this and others since version 6.   It is
very easy to create the table and add a row to disable certain types of
commands.  Don't you just love nosey users  :)

-----Original Message-----
Sent: Tuesday, May 21, 2002 12:12 PM
To: Multiple recipients of list ORACLE-L



I wish I could train them like monkeys, but no, it's an account for tech.
support
and they're ssh'ing into the production box, and I want to limit their
access and give
them no way to get to a command prompt, if I can avoid it.  Would you
believe that
they were originally setup to get into the box as the owner of the oracle
software..SCARY!


-----Original Message-----
Sent: Tuesday, May 21, 2002 1:21 PM
To: Multiple recipients of list ORACLE-L



Are they telnetting in to your server and then running SQLPlus at the
command prompt or are they running SQLPlus from their client and connecting
via SQLNet?

If the first, then "host" will not give them anything that they won't get
from the telnet session.

If the second, they they'll most likely end up at the ORACLE_HOME\bin
prompt of their workstation.

Are your users really just trained monkeys in disguise and you don't want
them to try to recreate the works of Shakespear via random keystrokes?
What's the real issue here?



 

                    Richard

                    Huntley              To:     Multiple recipients of list
ORACLE-L     
                    <rhuntley            <[EMAIL PROTECTED]>

                    @mindleaders.        cc:

                    com>                 Subject:     host from SQL> prompt

                    Sent by: root

 

 

                    05/21/2002

                    12:38 PM

                    Please

                    respond to

                    ORACLE-L

 

 







How can I prevent users from typing "host" to get to an OS prompt while
logged
into a DB account with an OS account?  They can host to a prompt now, but
they
can't do anything useful from there, since $ORACLE_HOME is the only thing
in their
PATH...just wondered if there is an easy way to prevent the use of the host
command
all together.

TIA!




--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
<http://www.orafaq.com
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Pass Stephanie
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to