xp_cmdshell

  • Hello

    I am system engineer so my knowledge about Sybase is very poor but I have a question for you 😉

    On a server, somme applications use xp_cmdshell to run specific shells. To do so, specific rights must be attached to scripts and directories in order to have rights for user sybase to do his job! (ie sybase is definied in the application group and use read/write/execute permission for group on the application filesystem). Is it a possible way to execute commands in cmd_shell with the application login instead of sybase login.

    Why I ask you this question? Because I want to reduce rights on filesystems, ie read/write/execution for application login but avoid write/execute permission for group.

    Thanks

    eric

  • You can specify a specific login for non sysadmins that xp_cmdshell will use.

    Steve Jones

    sjones@sqlservercentral.com

    http://www.sqlservercentral.com/columnists/sjones

    The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/

    http://www.dkranch.net

  • Tnaks Steve. But I have a doubt with your answer. When you say " You can specify a specific login ", I think you talk about login sybase not unix login (yes we use unix). Or am I wrong? So my problem is not the login sybase but the login which will be use to execute shell scripts on unix.

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply