Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: External tables. Security concerns.

Re: External tables. Security concerns.

From: DA Morgan <damorgan_at_psoug.org>
Date: Sat, 19 Aug 2006 12:46:46 -0700
Message-ID: <1156016807.4177@bubbleator.drizzle.com>


artmt_at_hotmail.com wrote:

> DA Morgan wrote:

>> artmt_at_hotmail.com wrote:
>>>> Yes and no. they are correct to not allow uncontrolled use of UTL_FILE
>>>> but directory objects are harmless and the only real risk with an
>>>> External Table would be you dumping GB of into a file and using too
>>>> much disk.
>>>>
>>>> Most likely they don't understand the technology because if they did
>>>> they would know that DIRECTORY OBJECTS are wholly internal to the
>>>> database.
>>>> --
>>>> Daniel A. Morgan
>>>> University of Washington
>>>> damorgan_at_x.washington.edu
>>>> (replace x with u to respond)
>>>> Puget Sound Oracle Users Group
>>>> www.psoug.org
>>> That answers my question about external tables.
>>> Thanks.
>>> How about the other components required to implement ETL via external
>>> tables?
>>> Would allowing FTP access or NFS mount necessarily jeopardize secutity
>>> of the Oracle server?
>> Not necessarily but my instinct would be to say H... no to FTP and I
>> would need to know a lot more about what NFS mounting has to do with
>> anything as it can only be done by root and you sure don't belong there
>> from inside the database.
>>
>> If in 10g look at using DBMS_FILE_TRANSFER to get and put files.
>> --
>> Daniel A. Morgan
>> University of Washington
>> damorgan_at_x.washington.edu
>> (replace x with u to respond)
>> Puget Sound Oracle Users Group
>> www.psoug.org
> 
> OK. I have Oracle database on one machine and files that contain data
> source for external tables on another.
> If FTP or NFS mounting are not recommended, what other options do I
> have?
> My understanding is that DBMS_FILE_TRANSFER is for transferring files
> between Oracle databases. Can it also be used for moving ASCII files
> from a non-Oracle machine?

DBMS_FILE_TRANSFER can be used to transfer your mother's cookie recipies. A file is a file is a file.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org
Received on Sat Aug 19 2006 - 14:46:46 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US