Subject Re: [ib-support] a "security" question (ISC4.gdb)
Author Paul Vinkenoog
Hi abadose,

> at first i want to describe the situation i am: customers get a cd,
> with an application and a firebird database. the customer has to
> install the whole database server to get access the database. the
> isc4.gdb has only one user which only my application knows (i don't
> want other applications to read my database!).

But what if some of your customers already run IB/FB? And what if at
present they don't, but later install IB/FB apps that expect a
decently working server?

> now i got one big problem: what if the customer changes the isc4.gdb
> to the original one? each application (ibconsole,...) would have
> access to my database and all its content.

I'm definitely not an Interbase expert, but my suggestion would be: if
your application's data is so sensitive that not even SYSDBA and/or
the superuser of the machine it runs on should be allowed to see it,
have your app encrypt it before storing it in the DB.


Greetings,
Paul Vinkenoog