Simple Security Questions

From: Palooka <nobody_at_nowhere.com>
Date: Tue, 14 Oct 2008 23:04:08 +0100
Message-ID: <pH8Jk.60649$v43.17747@newsfe21.ams2>


Can I safely lock the following accounts (10.2.0.4)?

SYSTEM
MGMT_VIEW
OUTLN None of these ever log in, according to DBA_AUDIT_TRAIL. I have session auditing on.

Also, should I create a new role, with various system privileges, to replace the "burned in" DBA role, and grant that to myself rather than DBA?

For information, we are using the database, OEM and RMAN. No RAC, no Oracle Applications, no ASM, no DataGuard.

Jobs are scheduled with the newer database scheduler, not DBMS_JOB. Is it therefore OK to set JOB_QUEUE_PROCESSES to zero?

Thanks,
Palooka Received on Tue Oct 14 2008 - 17:04:08 CDT

Original text of this message