Re: Security freakout

On Tue, 21 Nov 2000, Allan Nelson wrote:

> This may have to do with the UNIX umask setting for the Oracle account.

Or more likely the init.ora setting '_trace_files_public' is set to true.

Jared

>
> Allan
> ----- Original Message -----
> To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
> Sent: Tuesday, November 21, 2000 9:25 AM
>
>
> > RDBMS: 7.3.2 / 8.0.5 / 8.1.6 OS: AIX
> >
> > We are going through a major Security tightening here. The auditors are
> > demanding to know why $ORACLE_HOME/otrace/admin/*.dat files are
> world-writeable.
> >
> > I don't think these need to be world writeable - but I didn't set them
> that way
> > so Oracle must have at installation.
> >
> > Is there a problem with my changing them from -rw-rw-rw- to -rw-rw-r-- ??
> >
> > thanks,
> >
> > ..tom
> >
> > --
> > Please see the official ORACLE-L FAQ: http://www.orafaq.com
> > --
> > Author:
> > INET: blair_at_pjm.com
> >
> > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> > San Diego, California -- Public Internet access / Mailing Lists
> > --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Allan Nelson
> INET: anelson_at_houston.rr.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

Jared Still
Certified Oracle DBA and Part Time Perl Evangelist ;-) Regence BlueCross BlueShield of Oregon
jkstill_at_bcbso.com - Work - preferred address Received on Wed Nov 22 2000 - 21:01:45 CST