RE: "SET UID" not set for oracle executable ?

From: Carel-Jan Engel <cjpengel.dbalert_at_xs4all.nl>
Date: Tue, 10 Aug 2004 16:22:35 +0200 (CEST)
Message-ID: <4532.145.5.252.11.1092147755.squirrel@webmail.xs4all.nl>

AFIK, root.sh is executed to do things like copying oraenv etc. to /usr/local/bin, and only root can create that dir if it isn't there. Putting a default oratab in /etc is another task of root.sh.

At least on most default installed (not-hardened) unix flavours the user oracle self can set the setuid bit, and one doesn't need to be root to do that. Root privileges are needed to set the setuid bit on files that one doesn't own.

Regards, Carel-Jan

===
If you think education is expensive, try ignorance. (Derek Bok) ===

> Mark, I know all about setuid root programs and security hole
> that they represent, but oracle executable needs to have setuid
> to oracle protection. It's an installation requirement, not my
> invention.
>
> --
> Mladen Gogala
> Oracle DBA
> email:mladeng_at_aetvn.com
> Ext: 9787
>
> ----------------------------------------------------------------
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> ----------------------------------------------------------------
> To unsubscribe send email to: oracle-l-request_at_freelists.org
> put 'unsubscribe' in the subject line.
> --
> Archives are at http://www.freelists.org/archives/oracle-l/
> FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
> -----------------------------------------------------------------
>

Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Tue Aug 10 2004 - 09:18:26 CDT