Use groups to ensure Oracle Database Security

Creating user groups in the operating system is an effective way to ensure database security. Oracle programs are generally divided into two categories for security purpose: one class can be executed by all users, and the other class can only be executed by DBA. In Unix, the configuration file set for the group is/etc/group. For details about how to configure this file, see the relevant Unix manual.

Several methods to ensure security:

(1) Before installing Oracle Server, create a database administrator group (DBA) and assign the user IDs of the root and Oracle software owner to this group. Only 710 of the programs that DBA can execute are permitted. During the installation process, the SQL * DBA system permission command is automatically assigned to the DBA group.

(2) allow some Unix users to access the Oracle server system with restrictions, add an Oracle group of authorized user groups, and ensure that the Oracle group ID and common executable programs are assigned to the Oracle server utility routine, for example, SQL * Plus, SQL * Forms, and so on should be executed by this group, and the permission of this utility routine is 710, which will allow users in the same group to execute, while other users cannot.

(3) change the permissions of programs that do not affect database security to 711. NOTE: For the convenience of installation and debugging in our System, the default password of Sys and System for two users with DBA permissions in Oracle Database is manager. To ensure the security of your database system, we strongly recommend that you delete the passwords of these two users as follows:

In SQL * DBA, type:

Alter user sys indentified by password;

Alter user system indentified by password;

Here, password is the password set by the user.

Security of Oracle Server Utility Routines:

The following are some suggestions to protect the Oracle server from being used by illegal users:

1 2 Next Page

[Content navigation]
Page 1st: Use groups to ensure Oracle Database Security	Page 2nd: Use groups to ensure Oracle Database Security