RE: Securing Oracle, where to start? what to read?

From: Goulet, Richard <Richard.Goulet_at_parexel.com>
Date: Tue, 21 Jun 2011 12:06:50 -0400
Message-ID: <6B0D50B70F12BD41B5A67F14F5AA887F11897008_at_us-bos-mx022.na.pxl.int>



Simple answer, no. Which leads to the issue of which versions of Red Hat will run on what hardware. Note to Business folks: should the current hardware become nonfunctional and unsupportable then these databases are dead, period, start crying.

Richard Goulet
Senior Oracle DBA/Na Team Leader

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Hans Forbrich Sent: Tuesday, June 21, 2011 11:07 AM
To: oracle-l_at_freelists.org
Subject: Re: Securing Oracle, where to start? what to read?

At the risk of hijacking the thread, curiosity compels the question:

Does the OS change under those 8.1.7 environments?

(If yes, do you go through the same recert process? If no, how do you maintain security?)

/Hans

On 21/06/2011 8:50 AM, Goulet, Richard wrote:
> Yes, there are folks still running 8.1.7. We've 4 instances, business

> critical, and "no you can't upgrade those, it's take us a year to
> re-certify them".
>
> Richard Goulet
> Senior Oracle DBA/Na Team Leader
>
> -----Original Message-----
> From: oracle-l-bounce_at_freelists.org
> [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of David Litchfield
> Sent: Tuesday, June 21, 2011 10:29 AM
> To: Wolfgang Breitling
> Cc: oracle-l_at_freelists.org
> Subject: Re: Securing Oracle, where to start? what to read?
>
> On 20/06/2011 20:28, Wolfgang Breitling wrote:
>> What do you mean "a wee bit old"? There are people out there who are
>> still running Oracle 8i !!
>>
> I mean "old" insofar as the books were written before my research on
> cursor snarfing, cursor injection, lateral sql injection etc, etc...
> Maybe I should write a second edition :) Cheers, David
>
> --
> http://www.freelists.org/webpage/oracle-l
>
>
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>

--
http://www.freelists.org/webpage/oracle-l


--
http://www.freelists.org/webpage/oracle-l
Received on Tue Jun 21 2011 - 11:06:50 CDT

Original text of this message