Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Security Issues with Invoking O/S Commands from PL/SQL via Ex

RE: Security Issues with Invoking O/S Commands from PL/SQL via Ex

From: MacGregor, Ian A. <ian_at_SLAC.Stanford.EDU>
Date: Fri, 23 Jun 2000 08:20:06 -0700
Message-Id: <10537.110274@fatcity.com>


No, you didn't misread my mail. However, as far as I know, the ,"r" in rsh is for "remote", and not for "restricted". This is where the confusion lay. I now understand you are suggesting using a restricted shell for account which starts the extproc_listener.   Thanks.

Ian Macgregor
Stanford Linear Accelerator Center
ian_at_slac.stanford.edu
-----Original Message-----
From: Jamadagni, Rajendra [mailto:rajendra.jamadagni_at_espn.com] Sent: Friday, June 23, 2000 6:47 AM
To: Multiple recipients of list ORACLE-L Subject: RE: Security Issues with Invoking O/S Commands from PL/SQL via Ex

Ian,

Probably I misread your original email. I thought you were developing external procedure interface to execute OS commands. In this situation using a restricted shell would be useful.

sorry about the confusion ...

Cheers
Raj



Rajendra Jamadagni MIS, ESPN Inc.
Rajendra dot Jamadagni at ESPN dot com
QOTD: Any clod can have facts, but having an opinion is an art ! Any opinion expressed here is personal and doesn't reflect that of ESPN Inc.
-- 
Author: Jamadagni, Rajendra
  INET: rajendra.jamadagni_at_espn.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Fri Jun 23 2000 - 10:20:06 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US