extproc - How to tell if the feature is being used

From: Schauss, R. Peter (IT) <"Schauss,>
Date: Tue, 10 Mar 2009 15:37:28 -0500
Message-ID: <CD9150D80CFCFB42BC73C40791C1E01903144409_at_XMBIL112.northgrum.com>

This is Oracle running on Solaris/SunOS 5.9. The application is a COTS package.

Our security people just picked up via a scan of our servers that we still have extproc enabled in our listener.ora and tnsnames.ora files.  

select * from dba_libraries where file_spec is not null;

returns four lines for library_name values of DBMS_SUMADV_LIB, ORDIMLIBS, ORDVIRLIBS, and DR$LIBX. These are owned by sys, ordsys, ctxsys. There are an additional 33 rows in this table where file_spec is null.

select owner,name,line
from dba_source
where upper(line) like '%LANGUAGE%';

returns no lines.

Obviously we will be testing this in our QA environment before we disable extproc in production. However, I would like to tell my applications people and management that I am reasonably certain that the application is not using extproc before we start testing. Is there anywhere else I can look for evidence that we are or are not using external procedures?

Peter Schauss

Received on Tue Mar 10 2009 - 15:37:28 CDT

Original text of this message