Re: "Create Database" Security Hole?

Posted in 1999

Obnoxio The Clown — Fri, 30 Jul 1999 15:42:31 BST — source: Informix-list mailing list archive (1991-1998)

From: Red Valsen <red_valsen@yahoo.com> > >Is there any way to prevent a user (ANY user) from executing "create >database <databasename>"? We're using IDS7.30.UC2 & 7.23.UC1/Solaris >2.6/x86, but I'm sure this is a ubiquitous capability (security hole?) >on all Informix DB products. Not really, but why is it a security hole? If I can create a database and populate it, so what? ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

↪ replying to Obnoxio The Clown

Red Valsen — Fri, 30 Jul 1999 13:29:07 -0400 — source: Informix-list mailing list archive (1991-1998)

You just might take a fancy to filling my rootdbspace for s&g. Obnoxio The Clown wrote: > From: Red Valsen <red_valsen@yahoo.com> > > > >Is there any way to prevent a user (ANY user) from executing "create > >database <databasename>"? We're using IDS7.30.UC2 & 7.23.UC1/Solaris > >2.6/x86, but I'm sure this is a ubiquitous capability (security hole?) > >on all Informix DB products. > > Not really, but why is it a security hole? If I can create a database and > populate it, so what? > > ______________________________________________________ > Get Your Private, Free Email at http://www.hotmail.com