Re: new 11g system install with all the security warnings from oracle made me laugh

hpuxrac wrote:
> So you get 11g installed and the OEM page gives all ( well many at
> least ) of the warnings about granting of oracle packages that 10g
> had.
>
> Then it gave a ranking or grading of compliance issues or something
> similar ... 92.
>
> So why doesn't the default install give you a system that doesn't
> already have red flags and warnings "out of the box"? I understand
> that many of these "evolved up" in importance as 10x has been
> receiving maintenance ... so doing a new database in a 10.2.0.3
> patched system doesn't surprise me as much that it comes with prebuilt
> in opportunities.
>
> So why should that be any different with 11g eh?

The risk of breaking existing applications that expect specific features enabled is greater than the cost of asking a competent DBA to open the OEM DB Console, read the warnings, and make decisions about what should and should not be locked down.

If Oracle did what you suggest it should ... would you applaud them or just change your complaint to how, with wanton disregard, they broke your applications?

My impression is that the only thing that would change is the decibels.

-- 
Daniel A. Morgan
Oracle Ace Director & Instructor
University of Washington
damorgan_at_x.washington.edu (replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org