Re: permissions on $ORACLE_HOME/bin

Sweth Chandramouli (sweth+oracle-misc_at_sweth.gwu.edu) writes:

> In article <7hc0dd$1oq$1_at_autumn.news.rcn.net>,
> Jerry Gitomer <jgitomer_at_hbsrx.com> wrote:
> >Hi Sweth,
> >
> > I just checked my $ORACLE_HOME and everything in it is owned by the
> >Oracle user in group dba. Permissions are all 755. The same is true of my
> >$ORACLE_HOME/bin directory.
> so nothing in ?/bin is suid or sgid? the oracle support people
> seemed pretty adamant that the oracle binary itself, at least, needed to
> be suid, and preferably suid/sgid; i can't get the system to work if it
> isn't, myself.

The Oracle binary MUST be setuid with at least permissions 4751 and owned by the "oracle" user. Otherwise, it will not be able to access the IPC resources (shared memory and semaphores) that it needs. These are all owned by the oracle user.

6751 will work, but it's overkill as the binary does not have to be setgid. It won't hurt, though, because Oracle doesn't do anything with it. 4755 will work as well.

Note: the "oracle" user is the username that was picked when the database was installed.
--

                                        Rick
                                        Rick Wessman
                                        Security and Directory Technologies
                                        Server Technologies
                                        Oracle Corporation
                                        rwessman_at_us.oracle.com