Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Looking for Security book

Re: Looking for Security book

From: Pete Finnigan <pete_at_peterfinnigan.demon.co.uk>
Date: Wed, 12 Feb 2003 23:11:03 +0000
Message-ID: <PvE7YuAHStS+EwDM@peterfinnigan.demon.co.uk>


Hi Paul

Thanks very much for sharing these thoughts with us. I have a number of similar schemes and ideas on paper for securing file permissions on Win 2K and Win NT from a number of different sources.

In general it is not as easy as Unix to make the file system secure..:-( When I was writing the guide I had detailed discussions with a number of people on this subject and we came to the list of recommendations regarding windows file permissions in action 1.2.4 in the guide, rather than detailed steps to set individual file permissions.

I agree with you that in a book like this that is intended to be a "cookbook" style we couldn't include detailed steps to set every file permission and directory permissions, the book would have become too huge if so.

If i get chance I will test out your permissions list on a spare server i have and come back to you.

thanks for the comments and for sharing your info.

kind regards

Pete

-- 
Pete Finnigan

Email : pete_at_peterfinnigan.demon.co.uk
Email : pete_at_petefinnigan.com

Web site: http://www.petefinnigan.com

Independent consultant specialising in Oracle security. Pete Finnigan is the 
author of the recently published book about Oracle security from the SANS 
Institute "Oracle security Step-by-step (A survival guide for Oracle security)" 
- see http://store.sans.org for details.

Some recently published articles include:

http://online.securityfocus.com/infocus/1644 - "SQL injection and Oracle - part 
one"

http://online.securityfocus.com/infocus/1646 - "SQL injection and Oracle - part 
two"
Received on Wed Feb 12 2003 - 17:11:03 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US