Re: Stop using SYS, SYSTEM?

David

You can remove the "create session" priv from the RMAN user and this will make a little
harder for most users to connect, but RMAN will work fine :-)

David Wagoner wrote:

> Jared,
>
> I followed Robert Freeman's advice and created an RMAN user in all my
> DBs called backup_admin with SYSDBA privilege so that RMAN doesn't use
> SYS or SYSTEM. This allows you to change system passwords at will and
> not interfere with backups. Works just fine.
>
> Is this what you were talking about? Perhaps I misunderstood.
>
>
> Best regards,
>
> David B. Wagoner
> Database Administrator
> Arsenal Digital Solutions
> Web: http://www.arsenaldigital.com
>
> "the most trusted source for
> STORAGE MANAGEMENT SERVICES"
>
>
> The contents of this e-mail message may be privileged and/or
> confidential. If you are not the intended recipient, any review,
> dissemination, copying, distribution or other use of the contents of
> this message or any attachment by you is strictly prohibited. If you
> receive this communication in error, please notify us immediately by
> return e-mail or by telephone (919-466-6700), and please delete this
> message and all attachments from your system.
>
> Thank you.
>
>
> -----Original Message-----
> From: Smith, Ron L. [mailto:rlsmith_at_kmg.com]
> Sent: Wednesday, November 12, 2003 3:05 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Stop using SYS, SYSTEM?
>
>
> We are being asked by Auditing to stop using the SYS, and SYSTEM
> accounts. They would like for us to create an Oracle Role with the same
> permissions a SYS and SYSTEM, then grant the role to each of the DBA's.
> Don't ask me why. Nothing is being audited in 99% of the databases.
> They just say it in a paper some where so they said we shouldn't use it.
> This seems like it would cause lots of problems with exports, imports,
> installs, etc... Has anyone had to deal with this type of request? Any
> potential problems with making the change?
>
> Thanks!
> Ron Smith
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Smith, Ron L.
> INET: rlsmith_at_kmg.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Peter Gram, Miracle A/S
Phone : +45 2527 7107, Fax : +45 4466 8856, Home +45 3874 5696
mail  : peter.gram@MiracleAS.dk - http://MiracleAS.dk

Upcoming events:

Miracle Master Class with Tom Kyte, 12-14 January 2004
Visit   http://miracleas.dk/en/events.html#MasterClass

Visit http://www.miracleas.dk fore news !




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Peter Gram
  INET: peter.gram_at_miracleas.dk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).