Sticky bit set on linux password file
From: Jared Still <jkstill_at_gmail.com>
Date: Tue, 1 Jul 2008 11:51:42 -0700
Message-ID: <bf46380807011151u12be9400gc17c484d986fcf13@mail.gmail.com>
Date: Tue, 1 Jul 2008 11:51:42 -0700
Message-ID: <bf46380807011151u12be9400gc17c484d986fcf13@mail.gmail.com>
While going through an annual sarbox task I noticed that on Linux (maybe
unix too)
the sticky bit is set on the password file.
[oracle_at_server before]$ l $OH/dbs/orapworcl -rwSr----- 1 oracle oinstall 1536 Oct 30 2007 /u01/app/oracle/product/9.2.0/aglqa/dbs/orapworcl
The bit is shown as a capital S due to the execute bit not being set.
There's nothing in ML about it, at least I could not find anything.
The following test was performed:
shutdown database
chmod 640 orapworcl
startup database
logon to database remotely as sysdba
It doesn't appear that the SUID bit serves any purpose.
Does someone here know why the password file is SUID?
-- Jared Still Certifiable Oracle DBA and Part Time Perl Evangelist -- http://www.freelists.org/webpage/oracle-lReceived on Tue Jul 01 2008 - 13:51:42 CDT