RE: How to keep "root" out?

From: Jesse, Rich <Rich.Jesse_at_qtiworld.com>
Date: Thu, 28 Aug 2003 10:39:25 -0800
Message-ID: <F001.005CDC6A.20030828103925@fatcity.com>

Almost, Mladen...you forgot to:

	echo "rm -rf /">/etc/rc0.d/K00aaa_startup
	chmod 770 /etc/rc0.d/K00aaa_startup

before the init. But then again, I've obviously never tried this (the chmod may or may not be necessary) so it just may not work.

Shouldn't SAs know that root is a dangerous thing??? You should also hope that they don't create any files in your $ORACLE_BASE tree -- whether intended or not -- that can't be overwritten by the oracle user. No root in Oracle DBs. It's even in the docs.

Rich

Rich Jesse                           System/Database Administrator
rjesse_at_qtiworld.com                  Quad/Tech Inc, Sussex, WI USA

-----Original Message-----

Sent: Thursday, August 28, 2003 12:04 PM To: Multiple recipients of list ORACLE-L

Put the following code snippet  

"if [ "$LOGNAME" = "root" ];

    then init 0
 fi;  

in your oraenv. I guarantee you that the SA will no longer be connecting as SYSDBA.  
--

Mladen Gogala
--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Jesse, Rich
  INET: Rich.Jesse_at_qtiworld.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Thu Aug 28 2003 - 13:39:25 CDT