Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Usenet -> c.d.o.server -> Re: Looking for Security book
Hi Paul
Thanks very much for sharing these thoughts with us. I have a number of similar schemes and ideas on paper for securing file permissions on Win 2K and Win NT from a number of different sources.
In general it is not as easy as Unix to make the file system secure..:-( When I was writing the guide I had detailed discussions with a number of people on this subject and we came to the list of recommendations regarding windows file permissions in action 1.2.4 in the guide, rather than detailed steps to set individual file permissions.
I agree with you that in a book like this that is intended to be a "cookbook" style we couldn't include detailed steps to set every file permission and directory permissions, the book would have become too huge if so.
If i get chance I will test out your permissions list on a spare server i have and come back to you.
thanks for the comments and for sharing your info.
kind regards
Pete
-- Pete Finnigan Email : pete_at_peterfinnigan.demon.co.uk Email : pete_at_petefinnigan.com Web site: http://www.petefinnigan.com Independent consultant specialising in Oracle security. Pete Finnigan is the author of the recently published book about Oracle security from the SANS Institute "Oracle security Step-by-step (A survival guide for Oracle security)" - see http://store.sans.org for details. Some recently published articles include: http://online.securityfocus.com/infocus/1644 - "SQL injection and Oracle - part one" http://online.securityfocus.com/infocus/1646 - "SQL injection and Oracle - part two"Received on Wed Feb 12 2003 - 17:11:03 CST