Subject Re: [IBDI] Is this true? Can steal GDB file image using an external table.
Author Ed Malloy
??

I cannot find any recent posts by Sylvester in borland.public.intebase.general

ed

________________________________________

On 6/11/2002 at 4:43 PM toni_martir wrote:

>>>>>>>>
>Jan Henrik Sylvester reported this on
>borland.public.interbase.general.
>
>Connect to a DB and create an external table with the same name as
>the GDB itself and one integer column:
>
>CREATE TABLE THE_GDB EXTERNAL
>FILE 'C:\Borland\InterBase\Examples\Database\Employee.gdb' (
> INT_VALUE INTEGER );
>
>Now write a program which selects from this table and writes the
>integer values to a file. You'll have a byte-for-byte copy of the
>GDB.
>
>One would think that the blind_meta.sql script should prevent users
>from creating tables, but even after running this script I can still
>create tables as a non-SYSDBA/owner IB user.
>
>This completely defeats the point of using OS security to protect the
>GDB file.
>
>>>>>>>>>>
>
>Anyone tested it?
>Any workarounds?
>
>Thanks
>
>
>
>Community email addresses:
> Post message: IBDI@yahoogroups.com
> Subscribe: IBDI-subscribe@yahoogroups.com
> Unsubscribe: IBDI-unsubscribe@yahoogroups.com
> List owner: IBDI-owner@yahoogroups.com
>
>Shortcut URL to this page:
> http://www.yahoogroups.com/community/IBDI
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/

________________________________________