OraFAQ Forum: Security » Oracle installation groups and permissions

Home » RDBMS Server » Security » Oracle installation groups and permissions

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Oracle installation groups and permissions [message #279355]

Wed, 07 November 2007 21:32

quiksilv
Messages: 3
Registered: November 2007

Junior Member

Hi all,

What are the security implications of oracle client software which has been installed by the user "Oracle" and having a primary group membership being "dba". i.e not installed with the "oinstall" group?

Report message to a moderator

Re: Oracle installation groups and permissions [message #279356 is a reply to message #279355]

Wed, 07 November 2007 21:38

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

>What are the security implications of oracle client software
In this client installation is done on a "remote" (non-database system) & is a true client,
then there are no security implications, In My Opinion; regardless of the group used.

[Updated on: Wed, 07 November 2007 21:39] by Moderator

Report message to a moderator

Re: Oracle installation groups and permissions [message #279410 is a reply to message #279355]

Thu, 08 November 2007 03:10

quiksilv
Messages: 3
Registered: November 2007

Junior Member

Yes this is the case. We also don't have seperate administrators for software installs and database administration.

If the group on the client was set as dba and then the client connected to a remote database is it possible for any attempt to gain privileges as 'dba' on the remote database?

Cheers.

Report message to a moderator

Re: Oracle installation groups and permissions [message #279411 is a reply to message #279410]

Thu, 08 November 2007 03:16

Michel Cadot
Messages: 68729
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

No, if you set the remote_os_authent and remote_os_roles parameters to false.

Regards
Michel

Report message to a moderator

Re: Oracle installation groups and permissions [message #279413 is a reply to message #279355]

Thu, 08 November 2007 03:52

quiksilv
Messages: 3
Registered: November 2007

Junior Member

So this set to true (which isnt the case by default if im not mistaken) will enable a user to authenticate remotely as the dba purely since their group is?

Report message to a moderator

Re: Oracle installation groups and permissions [message #279424 is a reply to message #279413]

Thu, 08 November 2007 04:22

Michel Cadot
Messages: 68729
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Yes, it may.

Regards
Michel

Report message to a moderator

Previous Topic:	Oracle 11g DBMS_SQL Security
Next Topic:	Monitor user's daily activity

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Tue Jan 07 23:19:20 CST 2025