"SET UID " not set for oracle executable ? 2004-08-12 - By Jared.Still@(protected)
> I 'm about 98% sure that the SUID isn 't absolutely required just to get a
> database running.
Correct
> My memory might be a little foggy here, but I think I
> recall that one work around for a security hole that was identified
within
> the last year, where it was possible to execute the oracle binary with
> malicious command line arguments (I don 't recall the version or the
> platform), was to remove execute for "other " from the oracle binary and
> remove the suid.
>
I think you will find that chmod 751 $ORACLE_HOME/bin/oracle makes the
database very secure indeed.
Jared
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To unsubscribe send email to: oracle-l-request@(protected)
put 'unsubscribe ' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- --
|
|
