Re: KSH script from a stored procedure

Tony Jambu (TJambu_at_vtrlmel1.trl.oz.au) wrote:
: In article <3b3cba$55j_at_news.xs4all.nl>, schaaph_at_xs1.xs4all.nl (schaaph) says:
: >
: >Daniel J. Ruiz (djruiz_at_amoco.com) wrote:
: >: Is it possible to kick off a Korn Schell script from an ORACLE stored
: >: procedure? Any information in this area will be greatly appreciated.
: >: Thanks.
 

: >: --
: >: Dan Ruiz, Computer Applications, Whiting Refinery (MC 134), Amoco Oil Company
: >: Internet Address: djruiz_at_amoco.com, mhs!amoco!daniel_j_ruiz_at_attmail.com
: >
: >Use the dbms_pipe package to write a message to a pipe and write a Pro*C
: >progran that reads the pipe and starts up the script.

: You want to be very carefull about doing this. Make sure that you know
: the risks involved. As far as I am aware there is no such thing as
: permissions on a pipe and anyone can place data on it.
 

: If you had a Pro*C program reading stuff off the pipe and executing
: it, a joker can come along in the database and insert a row into the
: pipe saying 'rm -rf $HOME/*' or even 'rm -rf /'.
 

: You need to think about the security aspect of it as well. But yes,
: dbms_pipes shuold do the trick.
 

: ta
: tony

Very much correct. We have therefore no direct grants on the dbms_pipe package to end users. If users need a specific pipe they get a grant on a package that uses one (and only one) pipe. That way you can control teh access to pipes a bit more. You could even add password protection if you wanted to.

Teijo Received on Tue Dec 06 1994 - 12:05:50 CET