Re: 9i Newbie : spfile, sql-backtrack questions

In article <a95rth01bdv_at_drn.newsguy.com>, Pete says...
>
>In article <3CB5F7C5.7991AD6B_at_mytoys.de>, Knut says...
>>
>>>Scope SPFILE writes only to the SPFILE, and only takes effect when you restart
>>> the database. Only needed for the few remaining static parameters (like
>>> UTL_FILE_DIR).
>>
>>BTW, does anybody know why UTL_FILE_DIR still is not system or session
>>modifiable?
>>
>>Regards,
>>
>>Knut
>Not sure but probably security reasons. At least by having it default to *
>(which is the default from memory) Oracle can write to any directory that the
>Oracle account can reach.
>

the default is NOTHING (blank) and "*" is a really bad idea.

Anyone would be able to

utl_file.fopen( '/u01/app/oracle/oradata/', 'system.dbf' );

and on most unix'es that would "erase" -- unlink the system.dbf file causing for some serious heartburn on the next restart!

>HTH. Additions and corrections welcome.
>
>Pete
>
>SELECT standard_disclaimer, witty_remark FROM company_requirements;
>

--
Thomas Kyte (tkyte@us.oracle.com)             http://asktom.oracle.com/ 
Expert one on one Oracle, programming techniques and solutions for Oracle.
http://www.amazon.com/exec/obidos/ASIN/1861004826/  
Opinions are mine and do not necessarily reflect those of Oracle Corp