Re: file permission problem - 10g client on solaris

hpuxrac wrote:
On Jul 19, 9:00 pm, DA Morgan <damor...@xxxxxxxxx> wrote:
Susan wrote:
So I installed a 10.2.0.1.0 64-bit client on a Solaris 10 machine
using downloaded file 10gr2_client_sol.cpio.gz. After the
installation, to my surprise all directories and files under
$ORACLE_HOME are not readable and executable by group and other. So
other user won't even be able to use sqlplus or get into any of the
directory under $ORACLE_HOME. Yes I can do a chmod -R, but I am
wondering is this normal? I've installed 10.2.0.1.0 64bit RDBMS
software many times and majority of the directories/files are readable
by other users.
"Others" should not be given access to the server. If you are not
standing in the server room you, or have an equivalent connection,
you've no business using SQL*Plus on the server.
--
Daniel A. Morgan
University of Washington
damor...@xxxxxxxxxxxxxxxx (replace x with u to respond)
Puget Sound Oracle Users Groupwww.psoug.org

OP said "64 bit client". Read the original post again.

"Others" should not be given access?

So you want people to run the client as oracle not a better choice for
a unix user?

Based on what the OP wrote that is exactly what I mean. Which part of
"directories and files under $ORACLE_HOME are not readable and executable by group and other" don't you see as a security issue?

There is no reason anyone anyone other than the unix user oracle should
be directly accessing executables on the server unless the object is to
compromise system security and render any reasonable interpretation of
auditing moot.
--
Daniel A. Morgan
University of Washington
damorgan@xxxxxxxxxxxxxxxx (replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org
.

Relevant Pages

  • Re: Need help with threading..
    ... the threads in the thread pool are part of the MTA apartment. ... This might not work with your out of process COM server. ... MyKindOfObject myObject = new MyKindOfObject; ... You said that they are COM executables which honestly, ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Reducing the size of executables produced by GNAT
    ... 120K or 45K or 10K CGI executables won't make a difference because the ... The Ada Web Server library from AdaCore was designed ... I do not know how to do with the exceptions runtime. ...
    (comp.lang.ada)
  • Re: c++ web scripting
    ... > a compiler, produce an executable, put it on a server, and stroll away. ... the executables themselves are cached, not the HTML output of those ... Web server invokes the CGI handler for .cpp files, ServeCPPFile. ...
    (comp.lang.cpp)
  • Re: authenticating remote peer question
    ... InitializeSecurityContext - you get data to send to the server ... AcceptSecurityContext - you may get data to return to the client ... Microsoft MVP, MCSD ... I have a service which accepts executables send by remote machine and ...
    (microsoft.public.win32.programmer.networks)
  • RE: Can not Publish to new server
    ... happens when the web site is marked as executable. ... and executables" then the above error will happen, ... | I had a new server installed, and our web page was copied ... The serve is running Window Server ...
    (microsoft.public.frontpage.extensions.windowsnt)