Weve got a new security drive underway in our organisation, one of the
concerns that was raised was that access to the database on our unix
server should be prevented from the root user. I'm preparing to put
the argument that the root user is the system admin and as a result can
do anything, e.g "su" to oracle user account and gain access via a
"connect / as sysdba" (even if we remove sysdba, surely root can put it
back !) Is this correct , anyone got any experience of preventing root
users getting into the database to see the data ?.
Received on Mon Jul 25 2005 - 03:38:28 CDT
