Oracle binaries in rwx-r-xr-x mode

Hi,
Currently I had a database which contain highly
sensitive information/data. I had discovered that
all the oracle binaries in the oracle home are in
rwxr-xr-x mode. After auditing by auditors, they
questioned me why the binaries are in rwxr-xr-x
mode, they claimed that it will increase the risk of
unauthorized access and system down-time. Below are
my queries:
1) Have check with oracle support that rwxr-xr-x is
the default mode upon installation.
2) Can an os user who does not belong to dba group
execute the oracle binaries? Althought the binaries
others group are given r-x but i believe certain
library access are needed? Am i right?
3) Anyway to justify that oracle binaries need to be
set as rwxr-xr-x?
4) Will it poses any security vulnerability/threats
to the database?
Thank You. Any comments or advise are welcome.
Your help are greatly appreciated..Actually, the binary called 'oracle' MUST be "rws r-s r - -" for Oracle to work properly.
If it is not set like that, there is a good chance that the root.sh was not run at the end of the install. Similarily, the rest of the questions support that root.sh was not run.
Offhand, I'd guess you have a bad install.
Oracle pre-sales consultants can discuss the security consequences of properly installed executables with your auditors.

Similar Messages

Copied oracle binaries from one server

We are on 10.2.0.1 on solaris 10 We have copied oracle binaries from one server to another and now we want that oracle database will get installed
Can you please let us know that what needs to be done so that I will be in sync
If I am not wrong then there is command like relink
Please suggest>???

Take a look to the metalink note : How To Clone An Existing RDBMS Installation Using OUI Doc ID: Note:300062.1
... and the doc :
http://download.oracle.com/docs/cd/B19306_01/em.102/b31949/managing_deployments.htm#BABCGEHB
Nicolas.
Message was edited by:
N. Gasparotto

Sharing Oracle binaries for E-business

Dear All,
If I have three instances for Oracle E-business on same DB server, if I am facing some space issues, can I go ahead and share the oracle binaries for the three DB instances? alos what's the best practice on that. It is Oracle 10g running on Sun Solaris Sparc.
Regards

Are you referring to RDBMS ORACLE_HOME? If yes, you cannot share it between multiple instances.
If you are referring to other ORACLE_HOMEs, please see (Sharing The Application Tier File System in Oracle E-Business Suite Release 12 [ID 384248.1]), "Appendix B: Sharing Oracle E-Business Suite Release 12 File System Among Multiple Database Instances" section.
Thanks,
Hussein

DR on different Oracle binaries

Dear DBA,
our production database is 11gR2 (RAC) installed on HP-Itanium processor and we are planning to install the DR server (dataguard physical standby database) on HP- PA-Risc processor.
this installation requires 2 different Oracle binaries (one for the Itanium and the other for the PA-Risc).
do you think that it is feasible ? or the binaries should be the same ?
thx in advance
Elie

Hi,
It may work as PA RISC and ITanium Server has the same endian so you may be able to setup DR between Itanium and PA RISC server. You may have to test this though before setting it up for a production database.
There could be some unknown which may cause issue later during several failover/switcher senerio that you have to make sure that it works. I know that datafiles can be copied from PA Risc to Itanium to set up another database without any issue due to both using same endian format.
Regards

Oracle Binaries on Local machine

Hi,
Can i put oracle binaries on local machine and data on SAN storage
please clarify
Thanks,
Ali
Edited by: mustang4455 on Aug 30, 2009 1:33 AM

Hi,
Can i put oracle binaries on local machine and data on SAN storageYes, you can. You can even have Oracle binaries on the SAN storage with no issues.
Regards,
Hussein

Oracle binaries hanging

I've installed Oracle Client 10GR2 on Red Hat Enterprise Linux AS release 4 (Nahant Update 2).
But oracle binaries like sqlplus, imp, exp are hanging.
I've set ORACLE_HOME correctly. I've tried running sqlplus -VERBOSE but this hangs as well.
Any idea what could be the problem?

Am running Oracle 10GR2 on Red Hat Enterprise Linux ES release 4 (Nahant Update 5).
No problems with connectivity. Database instance is running fine and so are the client binaries.
There were some issues like installing/enabling kernel async_io - but these would only be applicable if you're trying to run an Oracle instance.
Are you connecting to a local instance, or are you using a network connection?
If a local connection, SQL*Plus will (via OCI) launch an oracle process from $ORACLE_HOME/bin and attached itself to it. That process will be the dedicated server process for SQL*Plus.
If a network connection, SQL*Plus will open a tcp connection (via OCI) to the Oracle server platform.
Obviously, "hanging" when connecting means a very different software layer for each.
You will need to supply some more detail. A copy and paste of the actual ssh/telnet session that hangs, the environment settings (ORACLE_HOME, TNS_ADMIN, ORACLE_SID, etc), and details of the type of connection (if a network connection, the TNS alias definition), and so on.

Oracle binaries

Hi Everybody!
I would be greatfull if anybody would tell me what are the oracle binaries meant for. Could you try to relate that in terms of windows? I only know that they are stored in the home directory..Why are they so important?

Multiple ORACLE_HOMEs are useful for maintainingseveral versions of the database-controlling
software.
What do you mean? Can you explain more, please?What he means by that statement is the you have an ORACLE_HOME for each database version (or multiple copies of either) on the same machine. For example you would need multiple ORACLE_HOMEs if you were to run a 9i database and 10g database on the same server.
You can expand that further into multiple HOMEs for each version of the Application Server or Developer Suite.

If GID, is changed, will it affect the Oracle Binaries?

Gurus /Oracle Community,
Oracle DB Version:10.2.0.3
OS: Solaris 64 Bit
Production
uid=500(oracle) gid=500(oinstall) groups=500(oinstall),501(dba)
Will there be a change and affect on the Oracle Binaries if we change the gid, value (for example - from 500 to 210) as we are looking to change the gid of some of the servers, which were configured 1 year back.
Any suggestions, metalink doc's for referals!
Thanks in advance

(220970.1)
Does changing uid or gid of the Oracle User affect Oracle Clusterware?
There are a lot of files in the Oracle Clusterware home and outside of the Oracle Clusterware home that are chgrp'ed to the appropriate groups for security and appropriate access. The filesystem records the uid (not the username), and so if you exchange the names, now the files are owned by the wrong group.
The above one focus on UID, but what happens, if we change the GID.
Will there be a affect, do i need to relink the Oracle binaries?
Any suggestions please!
Thanks In advance

Install sap through copy /datafile and oracle binaries

Dear Experts
we have an requirement would like to make an test system without installing sap software but only through copying oracle datafiles and oracle binaries
on windows 2003
we have just windows 2008 os on c:\ with 100 gb
d:\ with 250 gb empty space
so let me know the copy procedure in c:\ and d:\ which links to be copied
Thanks & Regards

http://scn.sap.com/people/harsha.bs/blog/2013/04/16/system-copy--backuprestore-method
Hi Rajendra,
Now I got your point .
Please check the above link and let me know if you are facing issues.
Thanks,
Pavan

How to relink Oracle binaries to new OS group assinged to oracle account

Hello,
Can someone tell us the steps how to relink oracle binaries to new OS group assinged to oracle account.
Regards,
Nikhil Jain

always post your questions with oracle version and operating name and version.
refer the link:-
http://oracle.erkansaka.org/2008/04/how-to-change-oracle-dba-group-in-unix.html
http://dbaforums.org/oracle/index.php?showtopic=7279
Thread: "change the DBA group" in a windows environment
"change the DBA group" in a windows environment

Build of oracle binaries

Hello
We have multiple oracle home bin in our landscape.
When upgrade of build a new SID, we need to go over the orainst , install of patch and opatchs.
this is time consuming. we try to copy the binaries from one SID to the new SID, but fail to run oracle, somewhere in the binaries, oracle link save the SID name...
how can we build a 'golden image' of the oracle binaries and the adopt it to the new SID.
TNX
Erez

Hi,
You are right that the inventory will be wrong but Oracle will oracle without problem
sure you cannot install patches after that. you still need to recopy them form clean installation and relibnk again.
relink all will change hardcoded paths in libraries..
if you want to be clean 100% then installing the software is the better solution.
Thanks

Find the ORACLE Binaries version from OS

Hi,
I want to know the Oracle binaries version/release from OS itself.
Background : I am preparing the steps for upgrading my customer database. After upgrade of oracle binaries, i need to check the database release from OS for confirmation. But i am not able to find the command for this requirement.
Please help me.
Thanks

sorry, no luck
$ strings `which oracle` | grep -i version | grep oracle
Java_oracle_xdb_servlet_XDBCookie_get_1version
Starting up ORACLE RDBMS Version: %.*s.
oracletrace_facility_version
Target ID version %d
cluster interconnect IPC library is incompatible with this version of Oracle
Oracle interface version information %d.%d
* For Oracle versions 9iR2 and 10gR1, a transformation is performed
captured. For Oracle versions after 10gR1, if this is determined
:

Move Oracle Binaries

Dear All,
Please tell how can i download Oracle Binaries from Source system and apply on Target system and which directory, i have to download/move of source system. there are Oracle version on Source and target system.
Source System
SQL> select * from v$version;
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bi
PL/SQL Release 10.2.0.4.0 - Production
CORE    10.2.0.4.0      Production
TNS for 64-bit Windows: Version 10.2.0.4.0 - Production
NLSRTL Version 10.2.0.4.0 - Production
Target System
SQL> select * from v$version;
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.5.0 - 64bi
PL/SQL Release 10.2.0.5.0 - Production
CORE    10.2.0.5.0      Production
TNS for 64-bit Windows: Version 10.2.0.5.0 - Production
NLSRTL Version 10.2.0.5.0 - Production

Dear Nicholas,
Oracle patch set 10.2.0.5 successfully applied with following sequence
Install main patch 10205
Copy and past the OPatch
OPatch>opatch apply 8350262
9584028
9445675
9843740
10357961
10431010
12429524
12914913
. you can check following log.
E:\oracle\PRD\102\OPatch>opatch lsinventory
========================================================
GENERIC OPATCH VERSION - FOR USE IN SAP ENVIRONMENT ONLY
========================================================
Invoking OPatch 10.2.0.5.0
Oracle Interim Patch Installer version 10.2.0.5.0
Copyright (c) 2010, Oracle Corporation. All rights reserved.
Oracle Home       : E:\oracle\PRD\102
Central Inventory : C:\Program Files\Oracle\Inventory
   from           : n/a
OPatch version    : 10.2.0.5.0
OUI version       : 10.2.0.5.0
OUI location      : E:\oracle\PRD\102\oui
Log file location : E:\oracle\PRD\102\cfgtoollogs\opatch\opatch2012-01-30_15-48-
47PM.log
Patch history file: E:\oracle\PRD\102\cfgtoollogs\opatch\opatch_history.txt
Lsinventory Output file location : E:\oracle\PRD\102\cfgtoollogs\opatch\lsinv\ls
inventory2012-01-30_15-48-47PM.txt
Installed Top-level Products (3):
Oracle Database 10g                                                  10.2.0.1.0
Oracle Database 10g Release 2 Patch Set 1                            10.2.0.2.0
Oracle Database 10g Release 2 Patch Set 4                            10.2.0.5.0
There are 3 products installed in this Oracle Home.
Interim patches (6) :
Patch 12914913     : applied on Mon Jan 30 15:48:14 GMT+05:00 2012
Unique Patch ID: 14166117
   Created on 5 Oct 2011, 02:45:06 hrs
   Bugs fixed:
     12914913, 10097176, 9545597, 11840910, 6011045, 7509714, 8354642, 8488233
     9322219, 9499302, 9767674, 10208905, 10214450, 10162036, 12565867
     12794025, 12799034, 9187546, 7115910, 9399589, 9386687, 12310567, 12421252
     5245039, 10244177, 8298501, 9431650, 10165083, 9926087, 7710224, 10350832
     12739299, 12807343, 12429524, 11066597, 9935787, 10236704, 11853331
     9825461, 8411930, 6651220, 7026523, 8882576, 9360157, 10068982, 10173237
     10324526, 8332730, 7516536, 11814891, 9871302, 6055658, 12363485, 10220194
     7592673, 10202758, 9735237, 10052339, 12332704, 8666117, 9145204
     9824435, 11703718, 7280234, 9269536, 10132870, 9094926, 9323583, 10144882
     9860769, 9488247, 10306945, 9532911, 9184754, 11657004, 9656004, 8528171
     10191707, 8943287, 11727013, 10407744, 11930680, 8966823, 10160615
     10637621, 4672767, 5638228, 12328269, 11731166, 9215341, 10159846
     11076894, 10269717, 10091171, 9061785, 8211733, 8412426, 9020537, 9024850
     9150282, 10010310, 7602341, 8865718, 11737047, 11675644, 10111381
     9368502, 8660422, 9032322, 9295217, 10224187, 10080775, 9841679, 8977287
     10054513, 10220046, 9577583, 10352673, 8277300, 8394351, 8350262, 9949948
     9879181, 9469117, 10017048, 8771916, 10155684, 6694396, 10308274
     10312161, 10157402, 8434467, 9668086, 9980062, 6151936, 10091698, 8228796
     9699654, 10114856, 9978573, 10156303, 5575218, 9081686, 10196896, 10080735
     5519322, 6768114, 6904068, 7045446, 7452759, 7612454, 8684595, 8811401
     9109487, 9320130, 9337325, 9362218, 9390484, 9548269, 9770451, 10155844
     9047975, 8663644, 7708267, 6086930, 9539556, 9355794, 8264642, 9495669
     6975402, 9659614, 9387574, 9320786, 9793452, 9024737, 9196440, 8970313
     9308296, 9663844, 10099855, 6402302, 7519406, 8224558, 8487143, 8544696
     8546356, 8664189, 8996060, 9261837, 9577921, 9586637, 9646836, 9683239
     9711859, 9713537, 9714832, 9726739, 9747153, 9772888, 9870614
Patch 10431010     : applied on Mon Jan 30 15:38:04 GMT+05:00 2012
Unique Patch ID: 13295575
   Created on 14 Jan 2011, 14:57:58 hrs PST8PDT
   Bugs fixed:
     9569264, 8874882, 9760734, 9099863, 6670871, 8980899, 8588311, 9680387
     8980918, 9105438
Patch 10357961     : applied on Mon Jan 30 15:36:32 GMT+05:00 2012
Unique Patch ID: 13813456
   Created on 6 Jun 2011, 01:39:07 hrs PST8PDT
   Bugs fixed:
     10357961
Patch 9843740      : applied on Mon Jan 30 15:35:52 GMT+05:00 2012
Unique Patch ID: 13572258
   Created on 21 Mar 2011, 00:17:02 hrs PST8PDT
   Bugs fixed:
     9843740
Patch 9445675      : applied on Mon Jan 30 15:35:24 GMT+05:00 2012
Unique Patch ID: 13823676
   Created on 17 Jun 2011, 12:52:27 hrs PST8PDT
   Bugs fixed:
     9445675
Patch 9584028      : applied on Mon Jan 30 15:34:35 GMT+05:00 2012
   Created on 30 Jun 2011, 13:52:29 CEST
   Bugs fixed:
     9584028
OPatch succeeded.
now..how can i move oracle binaries from source to target system?
Regards

Relinking Oracle binaries and multiple Oracle Homes

Hello,
My question is related to relinking Oracle binaries in the following scenario:
As part of larger migration project we are moving all the databases from one server to another. Both on old and on new server the OS is the same: HP-UX 11.23i. There are 5 databases on the source server, each with it's own Oracle Home (and Oracle binaries). All Oracle binaries for all the databases are version 10.2.0.3.
On the new server we have some of the migrated databases already in production. Now our DBA wants to move another database and, because for each database binaries are moved also from source to destination server, he has to relink the binaries on target server. Is it required to stop all the databases on the target server to perform the relink for this one DB, even if they all have separate Oracle Homes (binaries)?
Thanks for your answers
Maciej

883072 wrote:
Hello,
My question is related to relinking Oracle binaries in the following scenario:
As part of larger migration project we are moving all the databases from one server to another. Both on old and on new server the OS is the same: HP-UX 11.23i. There are 5 databases on the source server, each with it's own Oracle Home (and Oracle binaries). All Oracle binaries for all the databases are version 10.2.0.3.
On the new server we have some of the migrated databases already in production. Now our DBA wants to move another database and, because for each database binaries are moved also from source to destination server, he has to relink the binaries on target server. Is it required to stop all the databases on the target server to perform the relink for this one DB, even if they all have separate Oracle Homes (binaries)?
NO!

Is it possible to change the location of Current Oracle Binaries to another

Hi,
Can any one let me know the procedure if any for the following Scenario?
I have my Oracle binaries let say in /u01 now i want to move it to /u02
Thanx in advance..

oracle binaries are residing in bin directory of ur oracle instance.
say u have oracle instance running in /u01 and also the same oracle instance running in /u02, then u can move ur binaries to a different location. binaries are like pointers on the database which are used for routing the connection calls.
this is to be done by shutting down all the servers properly.

Oracle binaries in rwx-r-xr-x mode

Similar Messages

Maybe you are looking for