RE: 65 Oracle security papers, articles and presentations

From: Jamadagni, Rajendra <Rajendra.Jamadagni_at_espn.com>
Date: Tue, 08 Apr 2003 16:53:41 -0800
Message-ID: <F001.0057D898.20030408165341@fatcity.com>

Wait .. there is oracle tech note ... I'll send the # tomorrow from work.  

Raj

-----Original Message-----

Sent: Tuesday, April 08, 2003 4:49 PM
To: Multiple recipients of list ORACLE-L

Won't help:  

SQL> create user test identified by test;  

User created.  

SQL> grant create session to test;  

Grant succeeded.  

SQL> connect test/test
Connected.
SQL> alter user test identified by fred;  

User altered.  

SQL> connect / as sysdba
Connected.
SQL> revoke alter session from test;
revoke alter session from test
*
ERROR at line 1:
ORA-01952: system privileges not granted to 'TEST'    

Pete

"Controlling developers is like herding cats."

Kevin Loney, Oracle DBA Handbook

"Oh no, it's not. It's much harder than that!"

Bruce Pihlamae, long-term Oracle DBA  

-----Original Message-----

Rajendra
Sent: Tuesday, April 08, 2003 12:44 PM
To: Multiple recipients of list ORACLE-L

revoke alter session from users ...

Raj

---

---

Rajendra dot Jamadagni at nospamespn dot com All Views expressed in this email are strictly personal. QOTD: Any clod can have facts, having an opinion is an art !

-----Original Message-----

Sent: Tuesday, April 08, 2003 3:09 PM
To: Multiple recipients of list ORACLE-L

Pete,

Thanks, the collection is very useful.

Does the trick of dumping the library cache, level 10 and hunting for open text passwords still work in 9i? I thought they fixed it, so it would look like the following:

...
BUCKET 114176:
  LIBRARY OBJECT HANDLE: handle=6f4bcf88   name=alter user dummy identified by ***********   hash=e7b3be00 timestamp=04-08-2003 13:48:11 ...

Any "cure" for this?

Thanks,
Boris Dali

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: Rajendra.Jamadagni_at_espn.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



text/plain attachment: ESPN_Disclaimer.txt

Received on Tue Apr 08 2003 - 19:53:41 CDT