RE: Security issue : user account to do db management

From: Disser, Arno <a.disser_at_sfs.nl>
Date: Tue, 9 Jan 2001 17:28:09 +0100
Message-Id: <10736.126159@fatcity.com>

Yep. Working still with Oracle 7.3.4 and Alpha/OpenVMS the ORACLE7 account is only used for software installation and upgrades. Any VMS user with the ORA_DBA identifier granted may do any kind of SVRMGR tasks, independent of it's account group. This way it is possible to track an individual DBA, because any DBA works with it's own account.
btw: it seems to me that sharing an account is definitly a security risc!

-----Oorspronkelijk bericht-----
Van: paquette stephane [mailto:stephane_paquette_at_yahoo.com] Verzonden: dinsdag 9 januari 2001 16:52
Aan: Multiple recipients of list ORACLE-L Onderwerp: Security issue : user account to do db management

With Oracle 8i there is the oinstall group.

I'm curious to know if people are using the oracle account only for software upgrade and are using another account, let's call it admindba, with the dba group to do the maintenance task. Received on Tue Jan 09 2001 - 10:28:09 CST