Security Basics mailing list archives

Re: security against dba?s


From: Ray Van Dolson <rvandolson () esri com>
Date: Thu, 12 Feb 2009 15:25:25 -0800

On Thu, Feb 12, 2009 at 02:32:21PM -0800, Ansgar Wiechers wrote:
On 2009-02-12 Nick Vaernhoej wrote:
I am curious about the repeated argument "if you don't trust your
DBA's, hire/promote someone you can trust".
Is that a common perception?
I am personally of the belief that no one is to be trusted and my
system designs should be reflecting this.

How would you protect any system from its administrator?


Lock it in a room somewhere.  Don't give it a network access.  Nor any
sort of physical access.

Completely safe!!!


Current thread: