Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: host from SQL> prompt --- LOL

RE: host from SQL> prompt --- LOL

From: Thomas Day <tday6_at_csc.com>
Date: Tue, 21 May 2002 10:39:49 -0800
Message-ID: <F001.00466444.20020521103949@fatcity.com>

The product profile is the way to go.

                                                                                           
                    Richard                                                                
                    Huntley              To:     Multiple recipients of list ORACLE-L      
                    <rhuntley            <ORACLE-L_at_fatcity.com>                            
                    @mindleaders.        cc:                                               
                    com>                 Subject:     RE: host from SQL> prompt            
                    Sent by: root                                                          
                                                                                           
                                                                                           
                    05/21/2002                                                             
                    02:12 PM                                                               
                    Please                                                                 
                    respond to                                                             
                    ORACLE-L                                                               
                                                                                           
                                                                                           






I wish I could train them like monkeys, but no, it's an account for tech. support
and they're ssh'ing into the production box, and I want to limit their access and give
them no way to get to a command prompt, if I can avoid it.  Would you believe that
they were originally setup to get into the box as the owner of the oracle software..SCARY!

-----Original Message-----
Sent: Tuesday, May 21, 2002 1:21 PM
To: Multiple recipients of list ORACLE-L

Are they telnetting in to your server and then running SQLPlus at the command prompt or are they running SQLPlus from their client and connecting via SQLNet?

If the first, then "host" will not give them anything that they won't get from the telnet session.

If the second, they they'll most likely end up at the ORACLE_HOME\bin prompt of their workstation.

Are your users really just trained monkeys in disguise and you don't want them to try to recreate the works of Shakespear via random keystrokes? What's the real issue here?

                    Richard
                    Huntley              To:     Multiple recipients of
list ORACLE-L
                    <rhuntley            <ORACLE-L_at_fatcity.com>
                    @mindleaders.        cc:
                    com>                 Subject:     host from SQL> prompt
                    Sent by: root
                    05/21/2002
                    12:38 PM
                    Please
                    respond to
                    ORACLE-L
How can I prevent users from typing "host" to get to an OS prompt while logged
into a DB account with an OS account?  They can host to a prompt now, but they
can't do anything useful from there, since $ORACLE_HOME is the only thing in their
PATH...just wondered if there is an easy way to prevent the use of the host command
all together.

TIA!

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Thomas Day
  INET: tday6_at_csc.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Thomas Day
  INET: tday6_at_csc.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Tue May 21 2002 - 13:39:49 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US