Re: Prevent Root access from database

gazzag wrote:
> "There are very simple solutions to the problem that don't require
> writing a single line of code."
>
>
> Such as?

Here's one variant.

Three people are handed pieces of paper numbered 1, 2, and 3.

Person one goes to the keyboard and types passwd followed by 2 letters, writes the letters on their piece of paper and drop it into an envelope. The second and third person do so as well.

Now the only way anyone can log in as root is to open the envelope. They then do the work and when the work is completed the process is repeated.

Painful? Absolutely. But if it keeps everything legal well worth the, lets be honest here, 15 seconds it takes to get the piece of paper when someone needs to have root access.

If someone is using root more than a few times a year, on a production machine, then there is something wrong. Let the SA screaming begin.

-- 
Daniel A. Morgan
http://www.psoug.org
damorgan_at_x.washington.edu
(replace x with u to respond)