Re: Security Questions

From: Sunil Bhola <oraclebhola_at_yahoo.com>
Date: Tue, 24 Jan 2006 07:56:52 -0800 (PST)
Message-ID: <20060124155652.10902.qmail@web31615.mail.mud.yahoo.com>

Hi Dex,    

  As per security point of view you should be aware of security policies. Yes you are try abotu DBM_RANDOM package as this is again one of the issue.. and you should revoke the public privilege from this package too..    

  Yes roles should be password protected, but listen one thing... breaking database is very easy upto certain extent.    

  Regards,
  Sunil Bhola   

"J. Dex" <cemail_219_at_hotmail.com> wrote:   For those of you who have had security audits, I am wondering about a couple of things.....

Does it matter if standard Oracle roles are NOT password protected? Does it only need to be non-standard roles that are password protected?

PUBLIC typically has some execute privileges, dbms_random, etc. Will it adversely effect anything if those privileges are revoked?

---

On the road to retirement? Check out MSN Life Events for advice on how to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement

--

http://www.freelists.org/webpage/oracle-l   

QUERIES in Oracle, Feel free to Join:  

http://groups.yahoo.com/group/oracle_expert/  

Regards,
Sunil Bhola
Oracle_Expert, Moderator                 

---

 

 What are the most popular cars? Find out at Yahoo! Autos
--

http://www.freelists.org/webpage/oracle-l Received on Tue Jan 24 2006 - 09:56:52 CST