Security for Loading External Modules

Use the DB_LIBRARY_PATH 4configuration parameter to specify a comma-separated list of valid directory 4prefix locations from which the database server can load external modules, 4such as DataBlade modules. DB_LIBRARY_PATH takes effect when the database 4server is restarted after the parameter has been set.

The DB_LIBRARY_PATH configuration parameter allows you to control the location 4from which shared objects can be loaded, and it allows you to enforce policies 4and standards on the formats of the EXTERNAL NAME clause of the CREATE FUNCTION, 4CREATE PROCEDURE, and CREATE ROUTINE statements.

If the DB_LIBRARY_PATH configuration parameter is not set or is not present 4in the ONCONFIG file, security checks for loading external modules are not 4performed.

You should include in the DB_LIBRARY_PATH settings every file system in 4which your security policy authorizes DataBlades and UDRs to reside. DataBlades 4provided with Dynamic Server are stored under the $INFORMIXDIR/extend directory. For extensibility to work properly when security is turned 4on, the string "$INFORMIXDIR/extend" must be part of DB_LIBRARY_PATH.

For more information on the DB_LIBRARY_PATH configuration parameter, see 4the IBM Informix Dynamic Server Administrator's Reference. Also see the IBM Informix Guide to SQL: Syntax for 4information on using DB_LIBRARY_PATH with IFX_EXTEND_ROLE.