10.2.0.3 installation - hardening

Hi,
any idea what's the script name provided by oracle to be run to tighten up oracle binaries(permission settings)?
thanks
Jas

By default when you install Oracle 10g R2 software, it will ask you to run the relevant scripts manually. i.e. ROOT.sh
You can also check the files under $ORACLE_HOME/install.
Regards,
Sabdar Syed.

Similar Messages

Server Hardening Issues in Distributed Installation on Windows

Hello,
We are installing SAP CE 7.1 in a Distributed Installation on Windows. SCS and App Server on one HOST and DB (Oracle) on another host. There is a firewall between DMZ and App Server. There is a second firewall between App and DB Server
Our Network Security Team has done server hardening there by blocking all ports. Due to this we are running into following issues:
1. We installed SCS. But when we want to install DB, it needs the UNC path for SAPMNT. Our network team is saying they will not allow to share any folders between App and DB and we should tell them some other alternative. I want to know if something else is possible here provided this is a Windows Environment
2. They are asking about all the ports that they will need to open on the firewall for SAP CE to access DB and Web Server in DMZ to access SAP CE
If the experts can provide some inputs in this areas that will be really helpful.
Regards,
Shubham

Hi Shubham,
>> If you can let me know some details about the NFS Solution, that will be of great help. Our network security team does not understand how SAP Works and from my discussion with them I can say they don't want to. Since its a bit urgent I am looking for some alternatives as the fight to get this done might take more than a month otherwise
This is very bad Anyway, regarding your installation, if you are not planning to install a dialog instance on the DB host and keep your CE installation on the same host, you can turn off the windows sharing safely on the firewall. By doing so, the system will access its shares internally and don't need to share SAPMNT and SAPLOC. Under this circumstance, you don't need to run on a NFS server or a same solution like this. By the way, what about your object transport strategy? Are you planning to use CTS+?
>> For the firewall ports, My understanding is that in the Firewall between Web Server in DMZ and App Server, I need to open port 50000. Similarly in the firewall between App Server and DB Server, I need to open port 1521 for my application to access DB. But I dont know if CE will also speak to DB on port 1521 or some other port. Are there any other ports that need to be opened?
It is enough to open Oracle listener port (1521 standard port) and J2EE server HTTP port (50000) in order to run on CE, because of the system is standing on pure Java stack. What about the telnet access to the J2EE server? If you need to telnet support, you should 50008, also. But, you know that if you are planning to add an dialog instance you need to open more ports such as message server, P4, etc...
Best regards,
Orkun Gedik

CUIS 7.5 installation - SQL Security Hardening error

At the end of CUIS database server installation I am getting below error :
Error : Applying Security Hardening to SQL server ... Failed
How to resolve this issue ? and is there any way to bypass the security hardening ?
Cheers,
Mayur

I follow the workarround of the bug but it did not help. I still encounter with the same error.
Do I need to upgrade to later version before run the config tool?
Regards,
Thanh

Hardening Linux for Oracle 10g

I have been working on creating a bare-bones RHEL 5 installation which will act as an Oracle 10g database server. For hardening Linux, I have restricted to a bare minimum of packages to make it more secure. This installation did not have X-Windows, Gnome/KDE and a host of other services that will not be required on Production servers. I selected only the BASE installation which was further customized to include just the following (there is scope to trim this further, so feedback is welcome):
NetworkManager
readahead
smartmontools
yum-updatesd
irqbalance
acpid
crash
cryptsetup-luks
dos2unix
dump
finger
gnugpg
ksh
libaio
logwatch
m2crypto
man-pages
mdadm
nano
numactl
openssh-clients
openssh-servers
pam_ccreds
pam_krb5
pam_passwdqc
sendmail
setuptools
stunnel
sudo
symlinks
system-config-network
tree
unix2dos
unzip
vconfig
wget
which
yum
yum-rhn-plugin
yum-security
zip
Since I do not intend to use nfs, nis, samba – associated packages were not included. Further hardening was achieved by deleting non-required services (kudzu, avahi, gpm, atd, netfs, ip6tables).
The challenge comes when I begin setting up Oracle 10g using the oracle validated rpm method. In an attempt to resolve dependencies, YUM ends up installing 70 packages that do not apparently seem to have anything to do with an RDBMS (sound libraries, Gnome, X libraries and tools etc.). For me the libraries/binaries required for linking appear to be justified but the rest appear to be installed only for the Installer.
This package addition also ends up installing gamin which provides the gam_server which has bugs in it that lead to > 90% CPU consumption.
I further tried erasing some of the packages to see if anything broke. Till now nothing is broken and the database is running fine. Till now I have removed:
gamin
gamin-python
gnome-mount
gnome-vfs2
libbonoboui
libgnome
libgnomeui
oracle-validated
yum-updatesd
esound
hicolor-icon-theme
GConf2
gnome-keyring
gtk2
libglade2
libgnomecanvas
libnotify
libwnck
notification-daemon
audiofile
cups-libs
gnome-mime-data
cairo
pango
My questions:
• How have you created a production/hardened Linux based Oracle installation?
• Can you share your experiences in hardening Linux for Oracle and deploying the Oracle 10g RDBMS without installing the scores of packages which themselves might compromise the server?
• What exactly is the dependency for the Oracle 10g RDBMS on X11, Gnome, Gamin and graphic libraries such as Cairo and Pango (to name a few)?
• Which Linux system services are really mandatory for Oracle?
• Does a non-default secure installation compromise Oracle support?
The current memory footprint for this setup (without any workload) is (figures in MB):
total used free shared buffers cached
Mem: 1010 458 552 0 19 377
-/+ buffers/cache: 61 949
Swap: 2047 0 2047
…of this 290 MB belongs to Oracle ☺
I will be working with the other route – without using the oracle-validated rpm.
Please let me have your feedback.
BR
Aniruddha

Hi,
I'll paste the rpm -qa of a RHEL5 server I have installed through rpm -ivh (not yum at all)
aspell-0.60.3-7.1
aspell-en-6.0-2.1
aspell-es-0.50-13.2.2
at-3.1.8-82.fc6
atk-1.12.2-1.fc6
audit-libs-1.7.13-2.el5
audit-libs-1.7.13-2.el5
audit-libs-python-1.7.13-2.el5
authconfig-5.3.21-6.el5
avahi-0.6.16-6.el5
avahi-compat-libdns_sd-0.6.16-6.el5
basesystem-8.0-5.1.1
bash-3.2-24.el5
bc-1.06-21
binutils-2.17.50.0.6-12.el5
bitmap-fonts-0.3-5.1.1
bitstream-vera-fonts-1.10-7
bzip2-1.0.3-4.el5_2
bzip2-libs-1.0.3-4.el5_2
cairo-1.2.4-5.el5
checkpolicy-1.33.1-4.el5
chkconfig-1.3.30.1-2
compat-libstdc++-33-3.2.3-61
compat-libstdc++-33-3.2.3-61
coreutils-5.97-23.el5
cpio-2.6-23.el5
cpp-4.1.2-46.el5
cracklib-2.8.9-3.3
cracklib-dicts-2.8.9-3.3
crontabs-1.10-8
cryptsetup-luks-1.0.3-5.el5
cups-1.3.7-11.el5
cups-libs-1.3.7-11.el5
cyrus-sasl-2.1.22-5.el5
cyrus-sasl-lib-2.1.22-5.el5
db4-4.3.29-10.el5
db4-4.3.29-10.el5
dbus-1.1.2-12.el5
dbus-glib-0.73-8.el5
dbus-libs-1.1.2-12.el5
dbus-python-0.70-7.el5
Deployment_Guide-en-US-5.2-11
Deployment_Guide-es-ES-5.2-11
desktop-file-utils-0.10-7
device-mapper-1.02.32-1.el5
device-mapper-1.02.32-1.el5
device-mapper-event-1.02.32-1.el5
device-mapper-multipath-0.4.7-30.el5
diffutils-2.8.1-15.2.3.el5
dmidecode-2.9-1.el5
dmraid-1.0.0.rc13-53.el5
dmraid-events-1.0.0.rc13-53.el5
e2fsprogs-1.39-23.el5
e2fsprogs-devel-1.39-23.el5
e2fsprogs-devel-1.39-23.el5
e2fsprogs-libs-1.39-23.el5
e2fsprogs-libs-1.39-23.el5
ed-0.2-39.el5_2
eject-2.1.5-4.2.el5
elfutils-0.137-3.el5
elfutils-libelf-0.137-3.el5
elfutils-libelf-devel-0.137-3.el5
elfutils-libelf-devel-static-0.137-3.el5
elfutils-libs-0.137-3.el5
ethtool-6-3.el5
expat-1.95.8-8.2.1
file-4.17-15.el5_3.1
filesystem-2.4.0-2
findutils-4.2.27-6.el5
fipscheck-1.2.0-1.el5
fipscheck-lib-1.2.0-1.el5
fontconfig-2.4.1-7.el5
freetype-2.2.1-21.el5_3
freetype-2.2.1-21.el5_3
gawk-3.1.5-14.el5
gcc-4.1.2-46.el5
gcc-c++-4.1.2-46.el5
gdbm-1.8.0-26.2.1
gettext-0.14.6-4.el5
glib2-2.12.3-4.el5_3.1
glib2-2.12.3-4.el5_3.1
glib2-devel-2.12.3-4.el5_3.1
glib2-devel-2.12.3-4.el5_3.1
glibc-2.5-42
glibc-2.5-42
glibc-common-2.5-42
glibc-devel-2.5-42
glibc-devel-2.5-42
glibc-headers-2.5-42
gnutls-1.4.1-3.el5_2.1
grep-2.5.1-55.el5
groff-1.18.1.1-11.1
grub-0.97-13.5
gtk2-2.10.4-20.el5
gzip-1.3.5-10.el5
hal-0.5.8.1-52.el5
hdparm-6.6-2
hesiod-3.1.0-8
hicolor-icon-theme-0.9-2.1
hmaccalc-0.9.6-1.el5
htmlview-4.0.0-2.el5
hwdata-0.213.16-1.el5
info-4.8-14.el5
initscripts-8.45.30-2.el5
iproute-2.6.18-10.el5
iptables-1.3.5-5.3.el5
iptables-ipv6-1.3.5-5.3.el5
iputils-20020927-46.el5
kbd-1.12-21.el5
kernel-2.6.18-164.el5
kernel-headers-2.6.18-164.el5
keyutils-libs-1.2-1.el5
kpartx-0.4.7-30.el5
krb5-libs-1.6.1-36.el5
ksh-20080202-2.el5
kudzu-1.2.57.1.21-1
less-394-6.el5
libacl-2.2.39-3.el5
libaio-0.3.106-3.2
libaio-0.3.106-3.2
libaio-devel-0.3.106-3.2
libattr-2.4.32-1.1
libcap-1.10-26
libdaemon-0.10-5.el5
libdmx-1.0.2-3.1
libdrm-2.0.2-1.1
libgcc-4.1.2-46.el5
libgcc-4.1.2-46.el5
libgcrypt-1.4.4-5.el5
libgomp-4.4.0-6.el5
libgomp-4.4.0-6.el5
libgpg-error-1.4-2
libhugetlbfs-1.3-3.el5
libhugetlbfs-1.3-3.el5
libICE-1.0.1-2.1
libICE-1.0.1-2.1
libjpeg-6b-37
libpng-1.2.10-7.1.el5_3.2
libselinux-1.33.4-5.5.el5
libselinux-1.33.4-5.5.el5
libselinux-python-1.33.4-5.5.el5
libselinux-utils-1.33.4-5.5.el5
libsemanage-1.9.1-4.4.el5
libsepol-1.15.2-2.el5
libsepol-1.15.2-2.el5
libSM-1.0.1-3.1
libSM-1.0.1-3.1
libstdc++-4.1.2-46.el5
libstdc++-4.1.2-46.el5
libstdc++-devel-4.1.2-46.el5
libstdc++-devel-4.1.2-46.el5
libsysfs-2.0.0-6
libtermcap-2.0.8-46.1
libtermcap-2.0.8-46.1
libtiff-3.8.2-7.el5_3.4
libusb-0.1.12-5.1
libuser-0.54.7-2.el5.5
libvolume_id-095-14.21.el5
libvolume_id-095-14.21.el5
libX11-1.0.3-11.el5
libX11-1.0.3-11.el5
libXau-1.0.1-3.1
libXau-1.0.1-3.1
libXau-devel-1.0.1-3.1
libXaw-1.0.2-8.1
libXcursor-1.1.7-1.1
libXdmcp-1.0.1-2.1
libXdmcp-1.0.1-2.1
libXext-1.0.1-2.1
libXext-1.0.1-2.1
libXfixes-4.0.1-2.1
libXft-2.1.10-1.1
libXi-1.0.1-3.1
libXinerama-1.0.1-2.1
libxml2-2.6.26-2.1.2.8
libxml2-python-2.6.26-2.1.2.8
libXmu-1.0.2-5
libXp-1.0.0-8.1.el5
libXp-1.0.0-8.1.el5
libXp-devel-1.0.0-8.1.el5
libXpm-3.5.5-3
libXrandr-1.1.1-3.1
libXrender-0.9.1-3.1
libXt-1.0.2-3.1.fc6
libXt-1.0.2-3.1.fc6
libXtst-1.0.1-3.1
libXtst-1.0.1-3.1
libXv-1.0.1-4.1
libXxf86dga-1.0.1-3.1
libXxf86misc-1.0.1-3.1
libXxf86vm-1.0.1-3.1
lm_sensors-2.10.7-4.el5
logrotate-3.7.4-9
lsscsi-0.17-3.el5
lvm2-2.02.46-8.el5
m4-1.4.5-3.el5.1
mailx-8.1.1-44.2.2
make-3.81-3.el5
MAKEDEV-3.23-1.2
man-1.6d-1.1
man-pages-es-1.28-10.1.1
mcstrans-0.2.11-3.el5
mesa-libGL-6.5.1-7.7.el5
microcode_ctl-1.17-1.48.el5
mingetty-1.07-5.2.2
mkinitrd-5.1.19.6-54
mkinitrd-5.1.19.6-54
mktemp-1.5-23.2.2
module-init-tools-3.3-0.pre3.1.54.el5
nano-1.3.12-1.1
nash-5.1.19.6-54
ncurses-5.5-24.20060715
net-tools-1.60-78.el5
newt-0.52.2-12.el5
nspr-4.7.4-1.el5_3.1
nspr-4.7.4-1.el5_3.1
nss-3.12.3.99.3-1.el5_3.2
nss-3.12.3.99.3-1.el5_3.2
ntp-4.2.2p1-9.el5_3.2
ocfs2-2.6.18-164.el5-1.4.2-1.el5
ocfs2console-1.4.2-1.el5
ocfs2-tools-1.4.2-1.el5
ocfs2-tools-devel-1.4.2-1.el5
openldap-2.3.43-3.el5
openssh-4.3p2-36.el5
openssh-clients-4.3p2-36.el5
openssh-server-4.3p2-36.el5
openssl-0.9.8e-12.el5
oracleasm-2.6.18-164.el5-2.0.5-1.el5
oracleasmlib-2.0.4-1.el5
oracleasm-support-2.1.3-1.el5
pam-0.99.6.2-6.el5
pango-1.14.9-6.el5
paps-0.6.6-18.el5
passwd-0.73-1
patch-2.5.4-29.2.3.el5
pax-3.4-1.2.2
pciutils-2.2.3-7.el5
pcre-6.6-2.el5_1.7
perl-5.8.8-27.el5
pkgconfig-0.21-2.el5
pm-utils-0.99.3-10.el5
policycoreutils-1.33.12-14.6.el5
popt-1.10.2.3-18.el5
prelink-0.4.0-2.el5
procmail-3.22-17.1
procps-3.2.7-11.1.el5
psmisc-22.2-7
pycairo-1.2.0-1.1
pygobject2-2.12.1-5.el5
pygtk2-2.10.1-12.el5
python-2.4.3-27.el5
python-numeric-23.7-2.2.2
readline-5.1-3.el5
readline-5.1-3.el5
redhat-logos-4.9.16-1
redhat-lsb-3.1-12.3.EL
redhat-menus-6.7.8-3.el5
redhat-release-5Server-5.4.0.3
redhat-release-notes-5Server-29
rhpl-0.194.1-1
rootfiles-8.1-1.1.1
rpm-4.4.2.3-18.el5
rpm-libs-4.4.2.3-18.el5
rsh-0.17-38.el5
rsync-2.6.8-3.1
sed-4.1.5-5.fc6
selinux-policy-2.4.6-255.el5
selinux-policy-targeted-2.4.6-255.el5
sendmail-8.13.8-2.el5
setools-3.0-3.el5
setserial-2.17-19.2.2
setup-2.5.58-7.el5
sgpio-1.2.0_10-2.el5
shadow-utils-4.0.17-14.el5
slang-2.0.6-4.el5
smartmontools-5.38-2.el5
sqlite-3.3.6-5
sysfsutils-2.0.0-6
sysklogd-1.4.1-44.el5
sysstat-7.0.2-3.el5
system-config-securitylevel-tui-1.6.29.1-2.1.el5
SysVinit-2.86-15.el5
tar-1.15.1-23.0.1.el5
tcl-8.4.13-4.el5
tcl-8.4.13-4.el5
tcp_wrappers-7.6-40.7.el5
tcp_wrappers-7.6-40.7.el5
telnet-0.17-39.el5
termcap-5.5-1.20060701.1
time-1.7-27.2.2
tmpwatch-2.9.7-1.1.el5.2
tzdata-2009k-1.el5
udev-095-14.21.el5
udftools-1.0.0b3-0.1.el5
unzip-5.52-3.el5
usermode-1.88-3.el5.2
util-linux-2.13-0.52.el5
vim-common-7.0.109-6.el5
vim-minimal-7.0.109-6.el5
vixie-cron-4.1-76.el5
vte-0.14.0-2.el5
which-2.16-7
wireless-tools-28-2.el5
xorg-x11-filesystem-7.1-2.fc6
xorg-x11-utils-7.1-2.fc6
xorg-x11-xauth-1.0.1-2.1
zabbix-agent-1.4.6-1.el5
zip-2.31-2.el5
zlib-1.2.3-3
Hope to help,
Mario Alcaide

Exchange Server 2013 CU3 Installation Error - Fresh Installation

Hi All,
I am trying to install Exchange 2013 CU3 on Windows Server 2012 Datacenter Edition. This is New Server Forest build.
Forest Function Level and Domain functional Level is Windows Server 2008 R2
As part of this Fresh installation, I have tried to install CAS Server Role first on the server.
I have full admin (Schema,Entp, Domain) Previliges and installed MS recomended pre-requesities successfully.
Set the Powershell Execution policy as unrestricted.
But, When i run setup file using GUI option. I am getting the below error. I would like to know whether this is ignorable for installation or how to fix the issue.
Error:
Warning:
Task module "CmdletHealthCountersModule.Task_IterateCompleted" fails with exception "The type
initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
Warning:
Task module "CmdletIterationEventModule.LogCmdletIterationEvent" fails with exception "The type
initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
Warning:
Task module "CmdletHealthCountersModule.Task_Release" fails with exception "The type initializer for
'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped. Task execution
result should not be affected.
Note: Server OS hardening policy has been applied in this server as per company security policy and Symantec A/V also installed in this server.
Regards
Manoj

Hi,
Same Error for Mailbox Server also.
Stopped the Symantec AV Service and Tried. But result is same.
02/18/2014 06:39:06.0018] [0] Active Directory session settings for 'Get-OrganizationRelationship' are: View Entire Forest: 'True', Configuration Domain Controller: 'TESTPRADC01.Domain.LOCAL', Preferred Global Catalog: 'TESTPRADC01.Domain.LOCAL', Preferred
Domain Controllers: '{ TESTPRADC01.Domain.LOCAL }'
[02/18/2014 06:39:06.0050] [0] User specified parameters:
[02/18/2014 06:39:06.0050] [0] Beginning processing Get-OrganizationRelationship
[02/18/2014 06:39:07.0157] [0] [WARNING] Task module "CmdletHealthCountersModule.Task_Error" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped. Task execution
result should not be affected.
[02/18/2014 06:39:07.0391] [0] [ERROR] Couldn't find the Enterprise Organization container.
[02/18/2014 06:39:07.0469] [0] [WARNING] Task module "CmdletIterationEventModule.LogCmdletIterationEvent" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
[02/18/2014 06:39:07.0610] [0] [WARNING] Task module "CmdletHealthCountersModule.Task_IterateCompleted" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
[02/18/2014 06:39:07.0688] [0] [WARNING] Task module "CmdletIterationEventModule.LogCmdletIterationEvent" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
[02/18/2014 06:39:07.0688] [0] Ending processing Get-OrganizationRelationship
[02/18/2014 06:39:07.0766] [0] [WARNING] Task module "CmdletHealthCountersModule.Task_Release" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped. Task
execution result should not be affected.
[02/18/2014 06:39:08.0015] [0] Active Directory session settings for 'Get-AcceptedDomain' are: View Entire Forest: 'True', Configuration Domain Controller: 'TESTPRADC01.Domain.LOCAL', Preferred Global Catalog: 'TESTPRADC01.Domain.LOCAL', Preferred Domain Controllers:
'{ TESTPRADC01.Domain.LOCAL }'
[02/18/2014 06:39:08.0015] [0] User specified parameters:
[02/18/2014 06:39:08.0015] [0] Beginning processing Get-AcceptedDomain
[02/18/2014 06:39:08.0078] [0] [WARNING] Task module "CmdletHealthCountersModule.Task_Error" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped. Task execution
result should not be affected.
[02/18/2014 06:39:08.0078] [0] [ERROR] Couldn't find the Enterprise Organization container.
[02/18/2014 06:39:08.0140] [0] [WARNING] Task module "CmdletIterationEventModule.LogCmdletIterationEvent" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
[02/18/2014 06:39:08.0202] [0] [WARNING] Task module "CmdletHealthCountersModule.Task_IterateCompleted" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
[02/18/2014 06:39:08.0265] [0] [WARNING] Task module "CmdletIterationEventModule.LogCmdletIterationEvent" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped.
Task execution result should not be affected.
[02/18/2014 06:39:08.0265] [0] Ending processing Get-AcceptedDomain
[02/18/2014 06:39:08.0327] [0] [WARNING] Task module "CmdletHealthCountersModule.Task_Release" fails with exception "The type initializer for 'Microsoft.Exchange.Flighting.RotationHash' threw an exception.". This module is skipped. Task
execution result should not be affected.
[02/18/2014 06:39:08.0327] [0] While running the On-Promises test, either Get-AcceptedDomains or Get-OrganizationRelationship return a null value.
[02/18/2014 06:39:08.0717] [0] Finished loading screen WelcomePage.
[02/18/2014 06:45:23.0242] [0] Finished loading screen EULAPage.
[02/18/2014 06:45:26.0908] [0] Finished loading screen RecommendedSettingsPage.
[02/18/2014 06:45:30.0012] [0] Setup is determining what organization-level operations to perform.

Security Hardening of Publish server

Hi,
I noticed when the CQ Cloud creates a publish instance that it can be accessed via the public internet on port 4503
Also, the anonymous user is granted access to /etc/*
Obviously there is extra security hardening that needs to take place in cloud installs. This would usually not be an issue as /etc/ would be behind firewalls (in your APP zone)
Should the publish server's port 4503 be blocked in AWS, or is there specific details on hardening the permissions?
Thanks

Hey Tim,
The documentation points out to this page as a portal for all hardening of CQ
https://dev.day.com/docs/en/cq/current/deploying/security_checklist.html
Hope this is what you ment.

OVM 3.0.2 installation failing

We were trying the backup/restore process as per Oracle documentation, but fresh installation of OVMM is failing on the same machine where it used to work fine.
You can refer to the below output:
[root@ovmmanager CDROM]# ./runInstaller.sh --uuid 0004fb00000100009cd2528c1a3c8db5
Oracle VM Manager Release 3.0.2 Installer
Oracle VM Manager Installer log file:
/tmp/ovmm-installer.selfextract_0JK16q/install-2012-02-06-144846.log
Please select an installation type:
1: Simple
2: Standard
3: Uninstall
4: Help
Select Number (1-4): 2
Starting standard installation ...
Verifying installation prerequisites ...
*** WARNING: Recommended memory for the Oracle VM Manager server installation is 3950 MB RAM
Oracle Database Repository
==========================
Would you like to install Oracle Database 11g Express Edition (XE) or connect to an existing Oracle database?
1: Install Oracle Database 11g XE
2: Use an existing Oracle database
Select Number (1-2): 2
Enter the Oracle Database hostname [localhost]: ovmmanager
Enter the Oracle Database System ID (SID) [XE]: standard
Enter the Oracle Database SYSTEM password:
Enter the Oracle Database listener port [1521]:
Enter the Oracle VM Manager database schema [ovs]:
Enter the Oracle VM Manager database schema password:
Enter the Oracle VM Manager database schema password (confirm):
Oracle Weblogic Server 11g
==========================
Enter the Oracle WebLogic Server 11g user [weblogic]:
Enter the Oracle WebLogic Server 11g user password:
Enter the Oracle WebLogic Server 11g user password (confirm):
Oracle VM Manager application
=============================
Enter the username for the Oracle VM Manager administration user [admin]:
Enter the admin user password:
Enter the admin user password (confirm):
Verifying configuration ...
Start installing the configured components:
1: Continue
2: Abort
Select Number (1-2): 1
Step 1 of 9 : Database ...
Installing Database ...
Database installation skipped ...
Step 2 of 9 : Java ...
Installing Java ...
Step 3 of 9 : Database Schema ...
Creating database schema 'ovs' ...
Database schema 'ovs' already exists in the database
Continue installation?
1: Continue
2: Abort
Select Number (1-2): 1
Step 4 of 9 : WebLogic ...
Retrieving Oracle WebLogic Server 11g ...
Installing Oracle WebLogic Server 11g ...
Step 5 of 9 : ADF ...
Retrieving Oracle Application Development Framework (ADF) ...
Unzipping Oracle ADF ...
Installing Oracle ADF ...
Failed to install Oracle ADF ...
Starting Oracle Universal Installer...
Checking if CPU speed is above 300 MHz. Actual 2700 MHz Passed
Checking Temp space: must be greater than 150 MB. Actual 84212 MB Passed
Checking swap space: must be greater than 512 MB. Actual 7883 MB Passed
Preparing to launch Oracle Universal Installer from /tmp/OraInstall2012-02-06_02-55-29PM. Please wait ...
Invalid inventory pointer file:/tmp/ovmNOs5_L/ovmLm6nfl

Solved! Our security hardening scripts set the default umask to 0027. Setting it to 0022 before running the installer fixed the problem.

Installation Support of SAP Kernel Products on Vista / Windows Server 2008

one of the major design goals of Vista and Microsoft Server 2008 is to harden the operating system against unauthorized attacks from viruses, trojan horses etc.
The most important change in Vista/Windows Server 2008 (formerly longhorn) is: a process running under a user account which belongs to the local administrators group does not run with administrative priviledges as long the process is not elevated to the administrative level.
Elevation can be done by starting the process per Explorer using Run As Administrator or using special APIs, which are new in Vista. Programs started with Run as Administrator will not be able to start subprocesses elevated without additional changes (compared to Windows XP / Server 2003).
Security settings of many Windows system objects like Directories and Registry Hives etc are much more restrictive in Vista compared to Windows Server 2003 / XP. In some functions SAPinst tries to access registry keys and values for enumeration with full access which is no longer possible in Vista.
In other words: without code changes in SAPInst for Vista / Windows Server 2003 there will be no possibility to install a SAP System on these platforms.
If you do not have a SAP note stating the opposit or if you do not have a PAM (Product Availability Matrix) entry promising support for Vista / Windows Server 2008 the probability is about 99.9 percent (or even higher) that the installation will not run.
regards
Peter

> >>If you do not have a SAP note stating the opposit
> or
> but there is nothing with what I wrote: Note 1054740
> describes how to evaluate 7.00 based products.
...on Windows Longhorn (which will be your quoted Windows Server 2008)
> This version will work - but the rest - especially
> those ECC5 or 4.7 based IDES or MiniSAP systems or
> all that stuff which is widely copied through some
> unknown channels will not install.
yes, that's true.
I know of efforts porting MaxDB to Vista (there are some PTS'ses open) but generally one can say, that products below 7.00 are unlikely to work short term.
Markus

Can Administor from Console After Installation

Hi all,
I had installed iPlanet Directory Server (tried 5.0 & 5.1 SP2) on HPUX 11i machines. I had some problem administoring (like restarting both Directory Server & Admin Server) from the console.
Would like to know what should i look out for. No error on installation. Both Admin Server & Directory Server run up. Tried on 2 machines. One has OS being hardened while the other is not. I had problem on the hardened machine.
Would like to check if there are some services that cannot be turn off at the UNIX machine ?
Appreciate any responses. Thanks in advance for any help rendered.
Regards
Dennis

Hi,
Thanks for the advise.
My situation is: I will receive the "HTTP1.1/ 401 Unauthorised..." statement when I tried to use the admin console for which ever purpose. (be it configure Admin Server, see log files from admin server or directory server etc. All fns to be exact) However, I'm able to login to the admin console. At the admin console, the "server status" for the admin server is showing "Unknown" instead of "started" but when i do a grep at the machine, the watchdog and other processes are still there.
All the above is right after I installed my directory server (both version 5.0 & 5.1 SP2). Besides the UNIX services issues, will network security be another cause ?
Hope anyone can help. Thanks.
Regards
Dennis

Secure Solaris 7 or 8 Installation

Hello,
i am looking for a tool to secure my solaris core installation. Does anybody know where i can get such thing or some information about?
Thanks a lot.
R-Richter

Hi,
What do you mean by 'secure'? Take the machine offline than do the install, that is secure. If you mean you want the OS configured so that there are no security holes, then you need to look for a guide on hardening a solaris install. I have found that the best ones are at sans.org
~James

ITunes & Windows Vista Home - Error File C:\Program Data\Apple Computer\Installer\Cache\iTunes 10.5.142\iTunes.msi was rejected by digital signature policy.

Tried
https://discussions.apple.com/thread/2713232?start=0&tstart=0
and
http://www.vistax64.com/vista-general/159940-computer-blocking-anything-no-digit al-signature.html
with no avail!!!
iTunes opens after I click OK on the above message however I cannot do anything within the app its like Windows it preventing it from running.
PLEASE HELP!!!

Update:
I tried what the diagnostic told me to do, and repaired the installation. I was able to burn a CD in iTunes, but after I restarted, the drives have disappeared again! Here's the diagnostic info now:
Microsoft Windows Vista Home Edition (Build 6000)
MICRO-STAR INC. MS-6728
iTunes 7.6.0.29
QuickTime 7.4
CD Driver 2.0.6.1
CD Driver DLL 2.0.6.2
Apple Mobile Device 1.1.3.26
iTunes Serial Number 20D6EAF059AB94B4
Current user is not an administrator.
The current local date and time is 2008-01-15 19:09:32.
iTunes is not running in safe mode.
Video Display Information
ATI Technologies Inc., Radeon X1600/X1650 Series
ATI Technologies Inc., Radeon X1600/1650 Series Secondary
** External Plug-ins Information **
Plug-in Name: Last.fm iTunes plugin
Plug-in Loaded: Yes
Plug-in Version: 0.0.13
Plug-in File Version: 2.0.13.0
Plug-in Path: C:\Program Files\iTunes\Plug-ins\itw_scrobbler.dll
No drives showed up to be tested.

Can no longer enter data in the address bar {url Bar}, it correctly follows data from google search bar. It was a 1 month old installation so not a lot of complications

I was not adding anything to Firefox. I Refused tool bars embedded in several application installs on this new computer. Was working fine. Then had a problem with Google search, restored default values and re-tooled Firefox. At this point all worked fine. Then my url, address bar changed color to the same color as the program shell, a grey brown as opposed to the white it was before. With the change in color it no longer allows me to change the data showing in the bar. I can not delete or add data. I used to add a url and navigate to the domain. Now I can not

Greetings,
TY for the reply, the information was enlightening to be sure. I never knew safe mode was an option with Firefox. I have so many tasks running that I didn't want to shut things down. What I did is turn off some of the last plug-ins I installed. That did not fix the problem at least in the first look. What happened next was very interesting none the less. I had a moment of mouse spastic wrist syndrome and accidentally moved a tab in such a way that it opened in a new window. The URL bar was white and editable. So I moved all my tabs to the new window and everything works as it should. I have restarted Firefox this morning and it came back with the bar editable and I am speechless to understand what I may have done to correct the problem if anything ??

Installation of IPC AP 7.0 Jar is getting Failed when uploading in CRM

Hello Experts,
we did some changes in the previosly uploded version of IPC AP 7.0 customer user exit Jar file in eclipse.
While uploading the new modified jar through transaction /SAPCND/UE_DEV in CRM we are getting error :" installation of module <Jar file name > has failed ".
when we checked the logs in SM 53 we seen the below mentioned error:
Message: Exception of type com.sap.sql.log.OpenSQLException caught: Exception of type com.sap.sql.sqlparser.CommonSQLParserException: - statement "DELETE FROM "SVMCRT_MOD_TR_T" WHERE "MODULE_NAME" LIKE ? ESCAPE ^ (reason: Modification of ABAP tables is not permit ted)" is not supported
caught: - statement "DELETE FROM "SVMCRT_MOD_TR_T" WHERE "MODULE_NAME" LIKE ? ESCAPE ^ (reason: Modification of ABAP tables is not permitted)" is not supported
--> com.sap.sql.log.OpenSQLException: Exception of type com.sap.sql.sqlparser.CommonSQLParserException: - statement "DELETE FROM "SVMCRT_MOD_TR_T" WHERE "MODULE_NAME" LIKE ? ESCAPE '^' (reason: Modification of ABAP tables is n" is not suppor ted
caught: - statement "DELETE FROM "SVMCRT_MOD_TR_T" WHERE "MODULE_NAME" LIKE ? ESCAPE '^' (reason: Modification of ABAP tables is not permitted)" is not supported
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Ljava/lang/Class;Ljava/lang/String;[Ljava/lang/Object;)Lcom/sap/sql/log/OpenSQLException;(Syslog.java:85)
at
if required i can post the complete stack trace.
any inputs/suggestions are most welcome.
Thanks & regards,
Siddharth

Hi Mark,
Yesterday after Posting the thread we found the same Note ,Issue occured because of JAVA write access was not enabled on the table ,After enabling it as mentioned in SAP Note, Jar file get successfully uploaded.
Thanks for your Help also.
Regards,
Siddharth

Installation problem with NW'04 SR1: database connection failed

Hi all,
while installing NW '04 SR1 on Windows Server 2003 SP1 and MS SQL Server 2000 SP4 I ran into an error related to the database connection. While performing the step "Load Java Database content" SAPinst crashes with the message
com.sap.sql.log.OpenSQLException: Could not load class com.ddtek.jdbc.sqlserver.SQLServerDriver.
The connection to the SLQ Server with e.g. the Query Analyzer is OK. I had a problem with this installation setup before (have a look at the corresponding <a href="https://forums.sdn.sap.com/thread.jspa?threadID=338638&tstart=0">thread</a> ), the JDBC drivers where missing on the installation master but after copying them in the right direction the installation went on with no problem up to this point...
Has anybody an idea what could have happened here? Is this maybe a problem connected to the one I recently had
Below I attached the sapinst.log and jload.log with more detailed messages.
sapinst.log ###########
INFO 2007-03-12 22:06:24
Working directory changed to C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_~1\ONE_HOST.
INFO 2007-03-12 22:06:24
Output of D:\Java/bin/java.exe '-classpath' './sharedlib/antlr.jar;./sharedlib/exception.jar;./sharedlib/jddi.jar;./sharedlib/jload.jar;./sharedlib/logging.jar;./sharedlib/offlineconfiguration.jar;./sharedlib/opensqlsta.jar;./sharedlib/tc_sec_secstorefs.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\base.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\util.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\sqlserver.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\spy.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_jce_export.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_jsse.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_smime.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_ssl.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/w3c_http.jar' '-showversion' '-Xmx512m' 'com.sap.inst.jload.Jload' '-sec' 'WPT,jdbc/pool/WPT,D:\usr\sap\WPT\SYS\global/security/data/SecStore.properties,D:\usr\sap\WPT\SYS\global/security/data/SecStore.key' '-dataDir' 'S:/D51030724\J2EE_OSINDEP\J2EE-ENG/JDMP' '-job' 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/IMPORT.XML' '-log' 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/jload.log' is written to the logfile C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_~1\ONE_HOST/jload.java.log.
WARNING 2007-03-12 22:06:26
Execution of the command "D:\Java/bin/java.exe '-classpath' './sharedlib/antlr.jar;./sharedlib/exception.jar;./sharedlib/jddi.jar;./sharedlib/jload.jar;./sharedlib/logging.jar;./sharedlib/offlineconfiguration.jar;./sharedlib/opensqlsta.jar;./sharedlib/tc_sec_secstorefs.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\base.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\util.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\sqlserver.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\spy.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_jce_export.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_jsse.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_smime.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_ssl.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/w3c_http.jar' '-showversion' '-Xmx512m' 'com.sap.inst.jload.Jload' '-sec' 'WPT,jdbc/pool/WPT,D:\usr\sap\WPT\SYS\global/security/data/SecStore.properties,D:\usr\sap\WPT\SYS\global/security/data/SecStore.key' '-dataDir' 'S:/D51030724\J2EE_OSINDEP\J2EE-ENG/JDMP' '-job' 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/IMPORT.XML' '-log' 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/jload.log'" finished with return code 1. Output:
java version "1.4.2_13"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_13-b06)
Java HotSpot(TM) Client VM (build 1.4.2_13-b06, mixed mode)
12.03.2007 22:06:25 com.sap.inst.jload.Jload main
INFO: Jload -sec WPT,jdbc/pool/WPT,D:\usr\sap\WPT\SYS\global/security/data/SecStore.properties,D:\usr\sap\WPT\SYS\global/security/data/SecStore.key -dataDir S:/D51030724\J2EE_OSINDEP\J2EE-ENG/JDMP -job C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/IMPORT.XML -log C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/jload.log
12.03.2007 22:06:26 com.sap.inst.jload.Jload main
SCHWERWIEGEND: couldn't connect to DB
com.sap.sql.log.OpenSQLException: Could not load class com.ddtek.jdbc.sqlserver.SQLServerDriver.
ERROR 2007-03-12 22:06:26
CJS-20065 Execution of JLoad tool 'D:\Java/bin/java.exe '-classpath' './sharedlib/antlr.jar;./sharedlib/exception.jar;./sharedlib/jddi.jar;./sharedlib/jload.jar;./sharedlib/logging.jar;./sharedlib/offlineconfiguration.jar;./sharedlib/opensqlsta.jar;./sharedlib/tc_sec_secstorefs.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\base.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\util.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\sqlserver.jar;D:\usr\sap/WPT/JC10/j2ee\jdbc\spy.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_jce_export.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_jsse.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_smime.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/iaik_ssl.jar;D:/usr/sap/WPT/SYS/global/security/lib/tools/w3c_http.jar' '-showversion' '-Xmx512m' 'com.sap.inst.jload.Jload' '-sec' 'WPT,jdbc/pool/WPT,D:\usr\sap\WPT\SYS\global/security/data/SecStore.properties,D:\usr\sap\WPT\SYS\global/security/data/SecStore.key' '-dataDir' 'S:/D51030724\J2EE_OSINDEP\J2EE-ENG/JDMP' '-job' 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/IMPORT.XML' '-log' 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/jload.log'' aborts with returncode 1. Check 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/jload.log' and 'C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/jload.java.log' for more information.
jload.log ###########
12.03.07 22:06 com.sap.inst.jload.Jload main
INFO: Jload -sec WPT,jdbc/pool/WPT,D:\usr\sap\WPT\SYS\global/security/data/SecStore.properties,D:\usr\sap\WPT\SYS\global/security/data/SecStore.key -dataDir S:/D51030724\J2EE_OSINDEP\J2EE-ENG/JDMP -job C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/IMPORT.XML -log C:\PROGRA1\SAPINS1\NW04SR1\WEBAS_1\ONE_HOST/jload.log
12.03.07 22:06 com.sap.inst.jload.Jload main
SEVERE: couldn't connect to DB
com.sap.sql.log.OpenSQLException: Could not load class com.ddtek.jdbc.sqlserver.SQLServerDriver.
Best regards,
Bernd

Hello Kairat,
Please follow the below mentioned guide to install it.
Check all the parameters to set and run pre requisite checker before starting installation.
Keep in mind that before starting any SAP installation you should always run prerequisite checker.
https://websmp205.sap-ag.de/instguides --> SAP Netweaver -->SAP Netweaver 7.0 -- > Installations --> EHP2
Regards,
Amit Barnawal

Flash 12.0.0.77 plugin installs to wrong folder

In Vista x64, using either Firefox 28 or Firefox 24.4 ESR, the plugin installer (one downloaded from Adobe distribution) installs the 32 bit .dll file to \system32\macromedia\flash\ folder;
installs the 64 bit .dll to: \sysWOW64\macromedia\flash\ folder. So, they're exacly reversed.
I uninstalled it completely - went well. Then removed 1 remaining file in one of the above paths, then reinstalled. Did the same thing.
Before I did all this - I was *very sporadically* seeing the FlashPlayerPlugin_12_0_0_77.exe file, running (kinda "sitting") in background, in task manager. It never came to foreground w/ a UI, asking for anything. Couldn't figure out what it was, until started looking in the installation folders.
That's what lead to discovery the files were in wrong folders.
Anyone heard of this?
BTW, "Nayana" of Adobe Support chat, is a few bricks shy of a load. Or I am. I couldn't create an acct for forums. She kept saying, you don't need an acct - "just post your question. Other people will answer it."

EDIT: Seems there's no error in Flash installing to wrong folders, only error in my brain. Why didn't someone stop me from embarrassing myself?
System32 (in a 64 bit OS / architecture) is for 64 bit drivers, files; SysWOW64 is for 32 bit apps running in 64 bit OS.
https://en.wikipedia.org/wiki/WoW64
WoW64 (Windows 32-bit on Windows 64-bit) is a subsystem of the Windows operating system capable of running 32-bit applications and is included on all 64-bit versions of Windows
Also, http://www.samlogic.net/articles/32-64-bit-windows-folder-x86-syswow64.htm (section on SysWoW64)
End Edit.
Thanks for info on attaching images. A bit different than most forums. There's no "preview post" before submitting?
Screenshots of the 2 flash folder contents.
NOTE: I attached full FlashInstall.log earlier. I opened the 1.25 MB (text) file in an editor - copied contents to clipboard > paste to forum reply screen. Immediately locked up Firefox like a big dog. Couldn't perform any functions in Fx - not even reload or close browser. At same time, Fx memory use was continually climbing; to nearly 2 GB when I killed it. Won't make that mistake again.
Been many yrs since Fx locked up, doing anything. That aside, Adobe is definitely "different" than most forums. Almost like a person w/ no $ to use one of the many forum softwares available.
Most recent Flash installation logs.
C:\Windows\SysWOW64\Macromed\Flash\FlashInstall.log:
=O====== M/12.0.0.77 2014-03-27+18-59-59.282 ========
0000 [I] 00000010 "C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe" -maintain plugin
0001 [W] 00001015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe 5
0002 [W] 00001015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe 5
0003 [W] 00001037 Software\Microsoft\Windows\CurrentVersion\RunOnce/FlashPlayerUpdate 2
0004 [W] 00001037 Software\Macromedia\FlashPlayerPlugin/ 2
0005 [W] 00001037 Software\Macromedia\FlashPlayer/SwfInstall 2
0006 [W] 00001021
0007 [W] 00001036 Software\Macromedia\FlashPlayerActiveX/PlayerPath 2
0008 [W] 00001036 Software\Macromedia\FlashPlayerPlugin/PlayerPath 2
0009 [W] 00001036 Software\Macromedia\FlashPlayerActiveX/PlayerPath 2
0010 [W] 00001036 Software\Macromedia\FlashPlayerPlugin/PlayerPath 2
0011 [W] 00001037 Software\Microsoft\Windows\CurrentVersion\Control Panel\Extended Properties\System.ControlPanel.Category/C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2
0012 [W] 00001036 Software\Macromedia\FlashPlayerActiveX/PlayerPath 2
0013 [W] 00001036 Software\Macromedia\FlashPlayerPlugin/PlayerPath 2
0014 [W] 00001036 Software\Mozilla\Firefox\extensions/Plugins 2
0015 [W] 00001036 Software\Mozilla\Mozilla Firefox\extensions/Plugins 2
0016 [W] 00001036 Software\Mozilla\Mozilla Thunderbird\extensions/Plugins 2
0017 [W] 00001036 Software\Mozilla\Thunderbird\extensions/Plugins 2
0018 [W] 00001036 Software\Opera Software/Last CommandLine 2
0019 [W] 00001036 Software\Opera Software/Last CommandLine 2
0020 [W] 00001036 Software\Opera Software/Plugin Path 2
0021 [W] 00001036 Software\Opera Software/Plugin Path 2
0022 [W] 00001015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe 5
0023 [W] 00001015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe 5
0024 [I] 00000011 1
0025 [I] 00000012
=X====== M/12.0.0.77 2014-03-27+19-00-34.066 ========
=O====== M/12.0.0.77 2014-03-27+19-15-43.835 ========
0000 [I] 00000010 "E:\DOWNLOADS\Software\Multi Media\Browser PLUGINS\Flash Player\Flash Player Fx\install_flash_player_12.0.0.77_plugin002.exe"
0001 [W] 00001036 Software\Macromedia\FlashPlayerPlugin/Version 2
0002 [W] 00001036 Software\Macromedia\FlashPlayerPlugin/PlayerPath 2
0003 [W] 00001036 Software\Macromedia\FlashPlayerPlugin/Version 2
0004 [W] 00001036 Software\Macromedia\FlashPlayerPlugin/PlayerPath 2
0005 [I] 00000011 1
0006 [I] 00000020 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
0007 [W] 00001037 SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer/ 2
0008 [W] 00001037 SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin/ 2
0009 [W] 00001036 Software\Mozilla\Firefox\extensions/Plugins 2
0010 [W] 00001036 Software\Mozilla\Mozilla Firefox\extensions/Plugins 2
0011 [W] 00001036 Software\Mozilla\Mozilla Thunderbird\extensions/Plugins 2
0012 [W] 00001036 Software\Mozilla\Thunderbird\extensions/Plugins 2
0013 [W] 00001036 Software\Opera Software/Last CommandLine 2
0014 [W] 00001036 Software\Opera Software/Last CommandLine 2
0015 [W] 00001036 Software\Opera Software/Plugin Path 2
0016 [W] 00001036 Software\Opera Software/Plugin Path 2
0017 [I] 00000014 C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
0018 [I] 00000015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe
0019 [I] 00000024 C:\Windows\SysWOW64\Macromed\Flash\plugin.vch
0020 [I] 00000017 C:\Windows\SysWOW64\Macromed\Flash
0021 [I] 00000022 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
0022 [I] 00000019 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
0023 [I] 00000021 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
=X====== M/12.0.0.77 2014-03-27+19-16-11.879 ========

10.2.0.3 installation - hardening

Similar Messages

Maybe you are looking for