PCI Platform Changes

Last Post 20 Feb 2011 03:46 PM by trans53. 4 Replies.
AddThis - Bookmarking and Sharing Button Printer Friendly
  •  
  •  
  •  
  •  
  •  
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
trans53
New Member
New Member

--
18 Feb 2011 05:30 PM
I guess i have a question day:

One on the req's for PCI is to disable many
Extended stored procedures such as:

Disable access to xp_available media
Disable access to xp_dirtree
Disable access to xp_dsninfo
Disable access to xp_enumdsn
Disable access to xp_enumerrorlogs
Disable access to xp_enumgroups
Disable access to xp_eventlog
Disable access to xp_fixeddrives


How can i do that?
rm
New Member
New Member

--
19 Feb 2011 10:25 AM
revoke exec ON OBJECT::xp_dirtree FROM ...
trans53
New Member
New Member

--
20 Feb 2011 06:54 AM
Thank you rm,

My understanding is that in the case of xp_dirtree i can run revoke exec ON OBJECT::xp_dirtree FROM public


but for  xp_availablemedia for example if there is no role assigned to this procedure i could simply don't do anything?

is this correct?
 
rm
New Member
New Member

--
20 Feb 2011 01:03 PM
If doesn't grant permission to any role, no one has access besides sysadmin. So just leave it.
trans53
New Member
New Member

--
20 Feb 2011 03:46 PM
Posted By rm on 20 Feb 2011 03:03 PM
If doesn't grant permission to any role, no one has access besides sysadmin. So just leave it.


Sounds good to me, thank you
You are not authorized to post a reply.

Acceptable Use Policy