How to run Informix as a normal/unprivileged "informix" user?

By default the user informix is in the admiistrators group, which is a security hole. if somebody compromises the database he will an administrative account for the whole server. My question is how do I run Informix IDS (10) when the informix user is member of the Users group, but not of the Administrators? Thanks in advance.

On Oct 22, 10:23 am, kdob...@gmail.com wrote: > By default the user informix is in the admiistrators group, which is a > security hole. if somebody compromises the database he will an > administrative account for the whole server. > > My question is how do I run Informix IDS (10) when the informix user > is member of the Users group, but not of the Administrators? > > Thanks in advance. There is NO default group for user informix on any UNIX platform, the user and it's default group, group informix, are created by the system administrator manually and should not be a member of any other group. If you are on Windows, sorry, don't know. Of course, specifying platform and version information with all postings will avoid having to parse through irrelevant responses. Art S. Kagel

kdobrev@gmail.com wrote: > By default the user informix is in the admiistrators group, which is a > security hole. if somebody compromises the database he will an > administrative account for the whole server. > > My question is how do I run Informix IDS (10) when the informix user > is member of the Users group, but not of the Administrators? I haven't got a test box to hand to try this out. The 'informix' user needs to be a member of the 'Informix-Admin' group so you can't unset this, but have you tried simply taking 'informix' out the 'Administrator' group? If you have, does the Informix service still start and can you still run 'onstat' and 'onmode' commands in the command prompt window with Informix environment set? Ben.