13
votes
3answers
906 views

Does my Oracle DBA need root access?

My Oracle DBA Colleague is requesting root access on our production servers. He is arguing that he need it to perform some operations like rebooting the server and some other tasks. I do not not ...
0
votes
2answers
126 views

Oracle Security Update Patch July 2011 - How to know if i am affected?

Oracle Security Update Patch July 2011 I am using JDK 1.4.2_08, 1.4.2_19, 1.4.2_22, and Oracle DB 9.2.0.8. Can any experts tell me how to tell if i am affected, i.e. after installing the patch ...
4
votes
2answers
110 views

Is there any viable alternative to using Oracle Auditing

I am currently tasked with developing a action plan for monitoring DB activity, encompassing general actions (failed logons etc) with some finer grained monitoring(e.g. who selected from table x, what ...
1
vote
1answer
68 views

What DNSSec implementations are available, and have they been checked for padding Cryptographic Oracle vulnerabilities?

A cryptographic Oracle is where one can deduce the private key when a error condition is created. Considering the recent ASP.NET padding Oracle exploit, can anyone tell me if the DNSSec ...
2
votes
2answers
350 views

Unknown user name or bad password

I have 2 application hosted on server A which connects to the database server B. For every few seconds, there is this error log in the event viewer of the database sever. Both window services ...
0
votes
2answers
162 views

Secure communication between Oracle client and server

As per project requirement i need to to secure communication between Oracle server and client. I have oracle version 11g. What are the configuration steps i need to follow in the client and server ...
1
vote
1answer
177 views

Oracle Ordcom and Wallet Coexistence Problem

We use Oracle's ORDCOM infrastructure on our 11.1.0.7 database to interact with a COM object. The COM object doesn't do anything with the database. This process has been working fine for several ...
2
votes
2answers
203 views

How do you use Oracle's tools from scripts?

Most Oracle tools and scripts request that you pass them the password via the command line - where everyone on the same machine can see them. Example: exp <user>/<password> ... Is there ...
15
votes
10answers
549 views

Should core system servers be able to connect to the internet for maintenance/support?

A couple of our servers have Oracle maintenance licenses. Our hardware vendor asked there was internet connection in the server room. Our policy is that all machines in that room is isolated from the ...
1
vote
1answer
216 views

Grants for Oracle User

How do I get a list of all security rights for a specific Oracle user?
25
votes
7answers
4k views

Reasons to disable / enable SELinux

In the line of this question on StackOverflow and the completely different crowd we have here, I wonder: what are your reasons to disable SELinux (assuming most people still do)? Would you like to ...
4
votes
7answers
1k views

The wisdom of exposing a database server on the internet?

The leadership of the small company I work for has gotten very excited about SaaS and is pushing our product into a SaaS deployment - I have a concern about this because part of the functionality of ...