Re: system privilege

Hi

As promised I have modified the script now so that you can choose either to write to the screen or to a file to get over the 1000000 byte limit when checking users with a lot of privileges.

The script is in http://www.petefinnigan.com/tools.htm and has the same name as before find_all_privs.sql. here is a sample run, this time the output is captured to a file.

SQL> @find_all_privs

get user input

NAME OF USER TO CHECK [ORCL]: PETE
OUTPUT METHOD [S/F]: F
FILE NAME FOR OUTPUT [priv.lst]:
OUTPUT DIRECTORY [/tmp]:

old 162:        lv_file_or_screen:='&&output_method';
new 162:        lv_file_or_screen:='F';
old 164:                open_file('&&file_name','&&output_dir');
new 164:                open_file('priv.lst','/tmp');
old 166:        get_privs('&&user_to_find',lv_tabs);
new 166:        get_privs('PETE',lv_tabs);

PL/SQL procedure successfully completed.

SQL> hope this helps

kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.