extproc - How to tell if the feature is being used
Date: Tue, 10 Mar 2009 15:37:28 -0500
This is Oracle 126.96.36.199 running on Solaris/SunOS 5.9. The application is a COTS package.
Our security people just picked up via a scan of our servers that we still have extproc enabled in our listener.ora and tnsnames.ora files.
select * from dba_libraries where file_spec is not null;
returns four lines for library_name values of DBMS_SUMADV_LIB, ORDIMLIBS, ORDVIRLIBS, and DR$LIBX. These are owned by sys, ordsys, ctxsys. There are an additional 33 rows in this table where file_spec is null.
where upper(line) like '%LANGUAGE%';
returns no lines.
Obviously we will be testing this in our QA environment before we disable extproc in production. However, I would like to tell my applications people and management that I am reasonably certain that the application is not using extproc before we start testing. Is there anywhere else I can look for evidence that we are or are not using external procedures?