RE: Using DD to Read Data from Oracle Datafiles

She was pretty upset. It's interesting how people have gotten entrenched into their ideas. She remains absolutely convinced that her biggest risk of going to jail under SOX is not from the people with whom she works every day, but the "nameless, faceless" IT drones who "control everything" and "have their fingers in everything".

Scary, eh?  

...scary? L. Paul Bremmer and his Iraq CPA "lost" 38 tons of cash
money...no DBAs involved there...an amount of cash money visible from space!

Having said all that, it makes good sense to tighten up file permissions on Oracle database files so that "world" has no read, write, execute permissions at all. Then, you can read papers about BBED and "dd" and write nefarious "C" programs to your heart's content, but without an account with DBA privileges, you ain't going nowhere...  

...Uh, I gotta part ways with you. Your DBA privileges mean nothing if
you give a reasonable hack a shell prompt and execute priveleges for /bin/cc    

• http://www.freelists.org/webpage/oracle-l

--
http://www.freelists.org/webpage/oracle-l