When starting SQL*Plus, the command line option -r or -restrict can be specifed.
This option accepts an integer value between 1 and 3. Depending on the value, SQL*Plus disables commands that interact with the file system (such as for example the host command).