SAP Knowledge Base Article - Preview

3659313 - Security disk_sandbox option does not restrict file systems access -SAP IQ

Symptom

  • Tested IQ Server option
    -sf disk_sandbox
    It does not restrict writing to IQ file systems. This is inconsistent with IQ option description

  • Example.
    Despite the option, statements below are able to write outside the IQ database file locations :

    UNLOAD SELECT * from CUSTOMERS TO '/tmp/test_sandbox1.txt';
    or
    CALL dbo.xp_write_file( '/tmp/test_sandbox2.txt', '123456' );
 

 


Read more...

Environment

SAP IQ 16.1

Product

SAP IQ 16.1

Keywords

sybase,  831254,  CR831254,  CR#831254 , KBA , BC-SYB-IQ , Sybase IQ , BW-SYS-DB-IQ , BW on HANA with Sybase IQ Near-line Storage , Product Enhancement

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.