RE: How to keep "root" out?

List,

Agree with most: You can't keep (a good) root out. It take a really good root to keep one out.
(even if you could, the SAN-root will get in anyways ;-)

But if you want to invest a lot of time/effort/procedures, you can get quite far by using something similar to powerbroker - logonby.

Not sure if the product still exists, but it was reasonably effective
at the price of a lot of administrative overhead.

If I gave more details, I'd have to shoot you all, eh Dave ?

Regards,
PdV
Oracle DBA, and Certified ;-)
Disclaimers: AFAIK, GF, JMTC, and YMMV.  

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Piet de Visser
  INET: piet.de.visser_at_logicacmg.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).