MIME-Version: 1.0
In-Reply-To: <1211288883.1853437.1425324345912.JavaMail.yahoo@mail.yahoo.com>
References: <1211288883.1853437.1425324345912.JavaMail.yahoo@mail.yahoo.com>
Date: Mon, 2 Mar 2015 17:24:12 -0600
Message-ID: <CAMHX9JKJnBeYeyZGjA7DX-VehMroKBbTD5+3Q2D2nMxNb==dVQ@mail.gmail.com>
Subject: Re: gcc compiler
From: Tanel Poder <tanel@tanelpoder.com>
To: ckaj111@yahoo.ca
Cc: "oracle-l@freelists.org" <oracle-l@freelists.org>
Content-Type: multipart/alternative; boundary=089e0158b9360efd150510568469
Sender: oracle-l-bounce@freelists.org
Errors-to: oracle-l-bounce@freelists.org
Precedence: normal
Reply-To: tanel@tanelpoder.com
--089e0158b9360efd150510568469
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

I know this requirement may come from a policy defined by someone else, but
I would ask what kind of security risk will be avoided by removing a C
compiler (but leaving all other compilers/interpreters like python, perl
etc behind?).

The usual perceived risk is that someone can compile and run C source on a
system with a compiler. But similarly, if one can ship source code to a
server and run the compiler binary, one could just ship and run a malicious
binary directly. Or run a python script that does the damage. Python, with
ctypes for example can call any C-based system library.

Tanel


On Mon, Mar 2, 2015 at 1:25 PM, Chris King <ckaj111@yahoo.ca> wrote:

> Greetings all!
>
> I=E2=80=99m doing a fresh installation of Oracle 12c and 11g on a new lin=
ux RHEL6
> server. Pre-requisites include gcc and gcc-c++ compilers. The system admi=
n
> wants to remove these compilers after installation because they constitut=
e
> a security risk. I=E2=80=99m thinking doing so should be okay, as long as=
 these
> compilers are re-installed when Oracle patches are applied. Does anyone
> have experience doing this?
>
> Thanks in advance.
> ChrisK
>
>

--089e0158b9360efd150510568469
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I know this requirement may come from a policy defined by =
someone else, but I would ask what kind of security risk will be avoided by=
 removing a C compiler (but leaving all other compilers/interpreters like p=
ython, perl etc behind?).=C2=A0<div><br></div><div>The usual perceived risk=
 is that someone can compile and run C source on a system with a compiler. =
But similarly, if one can ship source code to a server and run the compiler=
 binary, one could just ship and run a malicious binary directly. Or run a =
python script that does the damage. Python, with ctypes for example can cal=
l any C-based system library.</div><div><br></div><div>Tanel</div><div>=C2=
=A0</div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Mon, =
Mar 2, 2015 at 1:25 PM, Chris King <span dir=3D"ltr">&lt;<a href=3D"mailto:=
ckaj111@yahoo.ca" target=3D"_blank">ckaj111@yahoo.ca</a>&gt;</span> wrote:<=
br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left=
:1px #ccc solid;padding-left:1ex"><div><div style=3D"color:#000;background-=
color:#fff;font-family:HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida =
Grande,sans-serif;font-size:16px"><div dir=3D"ltr">

</div><div><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,=
&quot;sans-serif&quot;;color:#1f497d">Greetings all!</span></div>

<div><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;=
sans-serif&quot;;color:#1f497d">=C2=A0</span></div>

<div><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;=
sans-serif&quot;;color:#1f497d">I=E2=80=99m doing a fresh installation of O=
racle 12c and 11g on a new linux
RHEL6 server. Pre-requisites include gcc and gcc-c++ compilers. The system
admin wants to remove these compilers after installation because they
constitute a security risk. I=E2=80=99m thinking doing so should be okay, a=
s long as these
compilers are re-installed when Oracle patches are applied. Does anyone hav=
e
experience doing this?</span></div>

<div><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;=
sans-serif&quot;;color:#1f497d">=C2=A0</span></div>

<div><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;=
sans-serif&quot;;color:#1f497d">Thanks in advance.</span></div>

<div><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;=
sans-serif&quot;;color:#1f497d">ChrisK</span></div>

<div dir=3D"ltr"><br></div></div></div></blockquote></div><br></div></div>

--089e0158b9360efd150510568469--
--
http://www.freelists.org/webpage/oracle-l