Re: Stop using SYS, SYSTEM?

Even though RMAN wouldn't be able to connect in sqlplus, it would still be able to via the rman executable.

"Oh Mr. RMAN, please backup that critical data to my laptop so I can burn it into a CD" ;)

Jared

Peter Gram <peter.gram_at_miracleas.dk>
Sent by: ml-errors_at_fatcity.com
 11/12/2003 12:54 PM
 Please respond to ORACLE-L  

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        Re: Stop using SYS, SYSTEM?

David

You can remove the "create session" priv from the RMAN user and this will make a little
harder for most users to connect, but RMAN will work fine :-)

David Wagoner wrote:

> Jared,
>
> I followed Robert Freeman's advice and created an RMAN user in all my
> DBs called backup_admin with SYSDBA privilege so that RMAN doesn't use
> SYS or SYSTEM. This allows you to change system passwords at will and
> not interfere with backups. Works just fine.
>
> Is this what you were talking about? Perhaps I misunderstood.
>
>
> Best regards,
>
> David B. Wagoner
> Database Administrator
> Arsenal Digital Solutions
> Web: http://www.arsenaldigital.com
>
> "the most trusted source for
> STORAGE MANAGEMENT SERVICES"
>
>
> The contents of this e-mail message may be privileged and/or
> confidential. If you are not the intended recipient, any review,
> dissemination, copying, distribution or other use of the contents of
> this message or any attachment by you is strictly prohibited. If you
> receive this communication in error, please notify us immediately by
> return e-mail or by telephone (919-466-6700), and please delete this
> message and all attachments from your system.
>
> Thank you.
>
>
> -----Original Message-----
> From: Smith, Ron L. [mailto:rlsmith_at_kmg.com]
> Sent: Wednesday, November 12, 2003 3:05 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Stop using SYS, SYSTEM?
>
>
> We are being asked by Auditing to stop using the SYS, and SYSTEM
> accounts. They would like for us to create an Oracle Role with the same
> permissions a SYS and SYSTEM, then grant the role to each of the DBA's.
> Don't ask me why. Nothing is being audited in 99% of the databases.
> They just say it in a paper some where so they said we shouldn't use it.
> This seems like it would cause lots of problems with exports, imports,
> installs, etc... Has anyone had to deal with this type of request? Any
> potential problems with making the change?
>
> Thanks!
> Ron Smith
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Smith, Ron L.
> INET: rlsmith_at_kmg.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Peter Gram, Miracle A/S
Phone : +45 2527 7107, Fax : +45 4466 8856, Home +45 3874 5696
mail  : peter.gram@MiracleAS.dk - http://MiracleAS.dk

Upcoming events:

Miracle Master Class with Tom Kyte, 12-14 January 2004
Visit   http://miracleas.dk/en/events.html#MasterClass

Visit http://www.miracleas.dk fore news !




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Peter Gram
  INET: peter.gram_at_miracleas.dk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).