Security question: sqlplus and the ps cmd on Unix

I am having a security problem with Oracle and Unix.

We have Oracle 7.1 installed on a SCO Unix server. Often. people log in to the Server and run SQLPlus from there using the command line:

sqlplus scott/tiger

(Of course, they use their own Oracle ID and password.)

The problem is this: If you use the Unix ps command to see what processes are running and you use the -f option, you can see the entire command line entered by another user, thus enabling you to see their password.

Is there any way around this? Received on Wed Mar 29 1995 - 00:00:00 CEST