DomainKey-Signature: a=rsa-sha1; c=nofws;        d=gmail.com; s=gamma;        h=message-id:date:from:sender:to:subject:cc:mime-version:content-type         :content-transfer-encoding:content-disposition:x-google-sender-auth;        b=UseFmPxK7jM/RwR3ehilbUGjrzc0TqbmBGLAaymb7rtRm3gcsd+xUOHQ6LnX/rPps1         sYbDKoGRY2rrY8pBQpSNju1oJ8bNepymqpXOco9GA/vlzW+DPuiMY7IUsqAAWjgTEj5M         Vfuo1ghh7x9xfcCA4N4eUNt/2i+TOz4A3hGhQ=
Message-ID: <5630dadb0812160701l3d837edbg8e2823cb5f7c8d89@mail.gmail.com>
Date: Tue, 16 Dec 2008 15:01:46 +0000
From: "oracle@ukcert.org.uk" <oracle@ukcert.org.uk>
To: oracle-l@freelists.org, niall.litchfield@gmail.com
Subject: Re: Alternatives to using utl_file
Cc: paul.wright@oracleforensics.com
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Sender: oracle-l-bounce@freelists.org
Errors-to: oracle-l-bounce@freelists.org
Precedence: normal
Reply-to: oracle@ukcert.org.uk

Hello Niall,
I have written a "CREATE_DIRECTORY" package which is a security
controlled implementation of CREATE ANY DIRECTORY specially for this
purpose..
http://www.oracleforensics.com/wordpress/index.php/create_directory/
Feel free to use it and send me improvements.
Cheers,
Paul

>still a security nightmare, but you could grant 'CREATE ANY DIRECTORY' to
>your application account and then create the directory object at runtime as
>well.

On Tue, Dec 16, 2008 at 2:01 PM, John Dunn <JDunn@sefas.com> wrote:

> OK, thanks
>
> The biggest issue I have with utl_file is needing to define utl_file_dir=
>
> Since the directories we need to access are not known till run time we have
> to specify utl_file_dir=*, which is a security nightmare.
>
>
>
>
> **
>
> *John *
>
--
http://www.freelists.org/webpage/oracle-l