RE: Security freakout

From: David Barbour <dbarbour_at_connectsouth.com>
Date: Tue, 21 Nov 2000 15:03:10 -0600
Message-Id: <10687.122659@fatcity.com>

Tom,

No problem changing them except that they're meant to hold data that could be generated by users who do not belong to the oracle/dba user/group. Somebody correct me if I'm wrong, but I believe this could occur if you schedule a trace of a third party app via a user that is identified externally.

David A. Barbour
Oracle DBA - ConnectSouth
512-681-9438
dbarbour_at_connectsouth.com

-----Original Message-----
From: blair_at_pjm.com [mailto:blair_at_pjm.com] Sent: Tuesday, November 21, 2000 9:25 AM To: Multiple recipients of list ORACLE-L Subject: Security freakout

RDBMS: 7.3.2 / 8.0.5 / 8.1.6 OS: AIX We are going through a major Security tightening here. The auditors are demanding to know why $ORACLE_HOME/otrace/admin/*.dat files are world-writeable.

I don't think these need to be world writeable - but I didn't set them that way
so Oracle must have at installation.

Is there a problem with my changing them from -rw-rw-rw- to -rw-rw-r-- ??

thanks,

..tom

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
  INET: blair_at_pjm.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Tue Nov 21 2000 - 15:03:10 CST