PhilB wrote:
> Weve got a new security drive underway in our organisation, one of the
> concerns that was raised was that access to the database on our unix
> server should be prevented from the root user. I'm preparing to put
> the argument that the root user is the system admin and as a result can
> do anything, e.g "su" to oracle user account and gain access via a
> "connect / as sysdba" (even if we remove sysdba, surely root can put it
> back !) Is this correct , anyone got any experience of preventing root
> users getting into the database to see the data ?.
surely there comes a point in time when you have to trust people that
you employ? If they break that trust then get rid of them?
Received on Mon Jul 25 2005 - 09:28:23 CDT
