extproc - How to tell if the feature is being used
Date: Tue, 10 Mar 2009 15:37:28 -0500
Message-ID: <CD9150D80CFCFB42BC73C40791C1E01903144409_at_XMBIL112.northgrum.com>
This is Oracle 8.1.7.4 running on Solaris/SunOS 5.9. The application is a COTS package.
Our security people just picked up via a scan of our servers that we still have extproc enabled in our listener.ora and tnsnames.ora files.
select * from dba_libraries where file_spec is not null;
returns four lines for library_name values of DBMS_SUMADV_LIB, ORDIMLIBS, ORDVIRLIBS, and DR$LIBX. These are owned by sys, ordsys, ctxsys. There are an additional 33 rows in this table where file_spec is null.
select owner,name,line
from dba_source
where upper(line) like '%LANGUAGE%';
returns no lines.
Obviously we will be testing this in our QA environment before we disable extproc in production. However, I would like to tell my applications people and management that I am reasonably certain that the application is not using extproc before we start testing. Is there anywhere else I can look for evidence that we are or are not using external procedures?
Thanks,
Peter Schauss
-- http://www.freelists.org/webpage/oracle-lReceived on Tue Mar 10 2009 - 15:37:28 CDT