Re: "Create Database" Security Hole?

From: "Jarrod Roberson" <noemail@nowhere.com> > >how is it a career limited move it is someone malicous that is leaving the >company or someone that is not part of the company ? Wow! I thought this thread was dead. Anyway, someone who is malicious and capable of doing stuff like that when leaving the company could probably do 1000's more evil things to you. If he's got enough brains to do this, he can probably do far more damaging things to you. Sure it's a potential problem, but it's not difficult to repair and there are more pressing issues to worry about. If you're hacked, filling up your disk is *way* down the list of fun things they're going to do to you. rm -rf / is *much* more likely, and then you have loads more disk space! Which is nice... :) >Obnoxio The Clown <obnoxio@hotmail.com> wrote in message >news:7o3r37$od6$1@news.xmission.com... > > > > From: Red Valsen <red_valsen@yahoo.com> > > > > > >You just might take a fancy to filling my rootdbspace for s&g. > > > > *I* might indeed, but *I* don't have access to your box, er, server, and > > surely you would make it clear to any luser that did have access that > > filling up your root dbspace is a career limiting move? :-) > > > > >Obnoxio The Clown wrote: > > > > > > > From: Red Valsen <red_valsen@yahoo.com> > > > > > > > > > >Is there any way to prevent a user (ANY user) from executing >"create > > > > >database <databasename>"? We're using IDS7.30.UC2 & >7.23.UC1/Solaris > > > > >2.6/x86, but I'm sure this is a ubiquitous capability (security >hole?) > > > > >on all Informix DB products. > > > > > > > > Not really, but why is it a security hole? If I can create a >database > > >and > > > > populate it, so what? > > > > > > ______________________________________________________ > > Get Your Private, Free Email at http://www.hotmail.com > > > ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com