Subject | Is this true? Can steal GDB file image using an external table. |
---|---|
Author | toni_martir |
Post date | 2002-06-11T16:43:41Z |
>>>>>>>Jan Henrik Sylvester reported this on
borland.public.interbase.general.
Connect to a DB and create an external table with the same name as
the GDB itself and one integer column:
CREATE TABLE THE_GDB EXTERNAL
FILE 'C:\Borland\InterBase\Examples\Database\Employee.gdb' (
INT_VALUE INTEGER );
Now write a program which selects from this table and writes the
integer values to a file. You'll have a byte-for-byte copy of the
GDB.
One would think that the blind_meta.sql script should prevent users
from creating tables, but even after running this script I can still
create tables as a non-SYSDBA/owner IB user.
This completely defeats the point of using OS security to protect the
GDB file.
>>>>>>>>>Anyone tested it?
Any workarounds?
Thanks