Hi All

We have got a HUGE process of securing our infrastructure(primarily the database)
We basically establish connection to oracle database from our UNIX shell scripts

when we do ps -ef | grep sqlplus


it blurts out all the credentials as output.

sqplus username/password@server

Now our DBAs have got a "security" concern if the passwords are shown even via ps -ef

is there anyway, we can try and hide this?

I am not sure how encrypting helps, but i am trying that option as of now.Any other options or suggestions on encryption would be appreciated.

Thanks
Srividya

You can avoid having the username/password on the command line by putting them in a "connect" statement as the first line of your sql program. If the program is in a ".sql" file it is easier to protect with unix file permissions.