OS:Sol. 2.8
r:9i.2.0.4

DBA creates a test user with connect, resource priv !
the test user then does a

conn / as sysdba
>connected

How to now prevent this i.e any user can conn as sys ?