From oracle-l-bounce@freelists.org Wed Dec 8 16:44:25 2004 Return-Path: Received: from air189.startdedicated.com (root@localhost) by orafaq.com (8.11.6/8.11.6) with ESMTP id iB8MiPM03762 for ; Wed, 8 Dec 2004 16:44:25 -0600 X-ClientAddr: 206.53.239.180 Received: from turing.freelists.org (freelists-180.iquest.net [206.53.239.180]) by air189.startdedicated.com (8.11.6/8.11.6) with ESMTP id iB8MiPm03757 for ; Wed, 8 Dec 2004 16:44:25 -0600 Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 37BC472C6AF; Wed, 8 Dec 2004 17:50:50 -0500 (EST) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08356-32; Wed, 8 Dec 2004 17:50:50 -0500 (EST) Received: from turing (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id EF4E972C673; Wed, 8 Dec 2004 17:48:26 -0500 (EST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=hOCeYwe7WTsWaISK4ug9rHG7KBagBkL+LaUyNFV09lRP+wG279Rq+BeVN4uFKJK9OolMBb/Z7xCbEp6ngyYiHgrXHMQETyKgJ/meFwZfPo9N2yQ/COKke67sOyCQKjVcIU7fgoME0Xfm2ZqxqifETos/kfluECf5JwtW/3XaigE= Message-ID: <47a6f72b04120814444da771bc@mail.gmail.com> Date: Wed, 8 Dec 2004 15:44:58 -0700 From: Barbara Baker To: oracle-l@freelists.org Subject: Re: Requirement to run as user SYS In-Reply-To: <5A14AF34CFF8AD44A44891F7C9FF410511E6B6@usahm236.amer.corp.eds.com> Mime-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 8bit References: <5A14AF34CFF8AD44A44891F7C9FF410511E6B6@usahm236.amer.corp.eds.com> X-archive-position: 13357 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-To: oracle-l-bounce@freelists.org X-original-sender: barb.baker@gmail.com Precedence: normal Reply-To: barb.baker@gmail.com X-list: oracle-l X-Virus-Scanned: by amavisd-new at freelists.org OK, NOW I need something from Oracle that says not just that these things SHOULD be run as SYS, but that they MUST be run as SYS. Anyone know of anywhere in the documentation where it says something like 'if you don't run this as SYS and it blows up, you're on your own??' or 'if you don't use the SYS acct to migrate, you're screwed'?? Please help me. If you cannot provide any documentation, then take a silent moment to feel sorry for me. thx barb On Wed, 8 Dec 2004 14:39:38 -0500, Powell, Mark D wrote: > Under OS group authentication for sysdba users: > > Start/Stop/Recover the db > > Run Oracle provided scripts that specify that the script is to be ran as SYS > such as optional $ORACLE_HOME/rdbms/admin/cat*, dbms*, and utl* scripts. > > Application of Oracle patch sets and upgrade scripts as specified in the > installation documentation > > It looks like this pretty much matches what you took from the manual. > > HTH -- Mark D Powell -- > > > > > -----Original Message----- > From: oracle-l-bounce@freelists.org > [mailto:oracle-l-bounce@freelists.org]On Behalf Of Barbara Baker > Sent: Wednesday, December 08, 2004 2:05 PM > To: oracle-l@freelists.org > Subject: What operations should be performed as SYS > > Have any of you had to define (for SOX or otherwise) what specific > operations should be performed by SYS versus other administrative > operations that can be performed by a user granted DBA privilege? If > so, are you willing to share? > (Help me! The auditor is on my tail. mayday mayday) > > Here's a list I came up with from the Database Administrator's Guide. > However, I'm not too happy with it. Any additions/changes would sure > be helpful. > Thanks! > Barb > > Perform startup and shutdown operations > Alter database: open, mount, back up, or change character set > Create database > Create or modify init or spfile > Alter database commands > Archivelog and recovery commands > -- > http://www.freelists.org/webpage/oracle-l > -- > http://www.freelists.org/webpage/oracle-l > -- http://www.freelists.org/webpage/oracle-l