That's weird. I'm not aware of any security
issues relating to sar and its use. Sounds like
paranoia mode just because the thing might
have the setuid bit on. Which means nothing
as far as security goes, unless sar allows interactive
command shells. Which it doesn't.
Cheers
Nuno Souto
nsouto_at_optusnet.com.au
----- Original Message -----
To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
Sent: Friday, August 01, 2003 1:44 AM
> Just got this email from my SysAdmin when I asked for access to sar. Anyone
> know what he is talking about? We are on AIX 4 and 5.
>
> "I cannot give you direct access to the sar command. Because of the
> parameters
> the command allows, it would be equivalent to giving full root access.
>
> If you could give me some details on the kind of information you would like
> to
> be able to collect, maybe we could set up some kind of command to obtain
> it."
>
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Nuno Souto
INET: nsouto_at_optusnet.com.au
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Fri Aug 01 2003 - 05:34:30 CDT
