Re: Security question: sqlplus and the ps cmd on Unix

Eli Haber (haber_at_panix.com) wrote:
: I am having a security problem with Oracle and Unix.
 

: The problem is this: If you use the Unix ps command to
: see what processes are running and you use the -f option,
: you can see the entire command line entered by another
: user, thus enabling you to see their password.
 

: Is there any way around this?

Yes- don't type your password on the command line.

This is not a security problem, this is carelessness on the part of your users.

SOme other possibilities on getting around this (with varying levels of security)-
1. use OPS$ accounts. THen they can log in to Oracle using

       sqlplus /

2. tell them to create a shell script with the right permissions   (700) that contains

       sqlplus user/password

Joe

--

=------------------------------------------------------------------=
Joe Nardone          |  "                          ." - excerpt 
nardone_at_clark.net    |    from the Richard Nixon White House Tapes