Re: some more questions about security...

From: Kenneth Topp <caught@prodigy.net> > >Looks like this group gives some good support, I cannot imagine >why the FAQ doesn't have the security questions in it, but here goes: > >1) Where is the Create Databases permission (so I can turn it off for >public) There isn't one. >2) Does everyone from different machines get mapped to public? Yes. >3) Must we portfilter on the router to achieve what tcp_wrappers would >offer? > Anyone try: > virtual interface (or loopback) w/ informix listening on >it > then a tcp_wrappers proxy on the real interface? > or shall I be the first.... I'm sorry, I don't speak hardware. >4) Does anyone actually run informix listening on tcp on a net connected >host (IP please :) Just about everyone does, if I understand the question correctly. >5) Is there a SQL command to find out how you are logged in? How you are logged in? >6)a. If I start dbaccess logged in locally, can pass a parameter and be >a different user. No. But you might be able to do something with SET ROLE... > b. If I write a C program, the SDK would allow me to login as a >different user? Fish. >7) Is "public" just scary? Especially where I live, yes. Otherwise, not really. >--------no spam please?--------- You wish... ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com