Home » RDBMS Server » Security » Oracle installation groups and permissions
Oracle installation groups and permissions [message #279355] Wed, 07 November 2007 21:32 Go to next message
quiksilv
Messages: 3
Registered: November 2007
Junior Member
Hi all,

What are the security implications of oracle client software which has been installed by the user "Oracle" and having a primary group membership being "dba". i.e not installed with the "oinstall" group?
Re: Oracle installation groups and permissions [message #279356 is a reply to message #279355] Wed, 07 November 2007 21:38 Go to previous messageGo to next message
BlackSwan
Messages: 25050
Registered: January 2009
Location: SoCal
Senior Member
>What are the security implications of oracle client software
In this client installation is done on a "remote" (non-database system) & is a true client,
then there are no security implications, In My Opinion; regardless of the group used.

[Updated on: Wed, 07 November 2007 21:39] by Moderator

Report message to a moderator

Re: Oracle installation groups and permissions [message #279410 is a reply to message #279355] Thu, 08 November 2007 03:10 Go to previous messageGo to next message
quiksilv
Messages: 3
Registered: November 2007
Junior Member
Yes this is the case. We also don't have seperate administrators for software installs and database administration.

If the group on the client was set as dba and then the client connected to a remote database is it possible for any attempt to gain privileges as 'dba' on the remote database?

Cheers.
Re: Oracle installation groups and permissions [message #279411 is a reply to message #279410] Thu, 08 November 2007 03:16 Go to previous messageGo to next message
Michel Cadot
Messages: 64152
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
No, if you set the remote_os_authent and remote_os_roles parameters to false.

Regards
Michel
Re: Oracle installation groups and permissions [message #279413 is a reply to message #279355] Thu, 08 November 2007 03:52 Go to previous messageGo to next message
quiksilv
Messages: 3
Registered: November 2007
Junior Member
So this set to true (which isnt the case by default if im not mistaken) will enable a user to authenticate remotely as the dba purely since their group is?
Re: Oracle installation groups and permissions [message #279424 is a reply to message #279413] Thu, 08 November 2007 04:22 Go to previous message
Michel Cadot
Messages: 64152
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Yes, it may.

Regards
Michel
Previous Topic: Oracle 11g DBMS_SQL Security
Next Topic: Monitor user's daily activity
Goto Forum:
  


Current Time: Sat Dec 10 01:37:35 CST 2016

Total time taken to generate the page: 0.22667 seconds