Re: SQL*Plus: How to disable Unix shell?

Peter Luckock <luckock_at_enternet.com.au> wrote in article <3347F741.5809_at_enternet.com.au>...
>
> Is there any secure way to prevent users from opening a command-line
 shell
> from within Unix-hosted SQL*Plus (as shipped with Oracle 7.2.2 for Unix
> System V release 4.0 running on SUN/Sparc).
>

Redefine the SHELL variable after the users logs in but before starting SQL*Plus. Define it as a progam that exists (such as /bin/true), but is inaquious. When they try and shell out it will simply kick them back to a SQL prompt. For example:

For Borne/Korn shell: SHELL=/bin/true export SHELL For C shell: setenv SHELL /bin/true

-- 
John Dixon
john.dixon_at_bsis.com