Oracle Vault-Vault unmount

Oracle Vault is an important part of the three security technologies. Compared with the other two types, Label Security and Virtual Private Database (VPD), Oracle Vault better reflects the O & M system management and Security rule configuration. After the Vault is installed and configured, Oracle's original sys superuser security role is stripped, and data, operations, and resources are subject to security restrictions in a rule-based manner. It should be said that only after the Vault is used can the Administrator's behavior be controlled.
 
This article describes how to detach a Vault Based on 11gR2. Note: There are some differences in the methods for uninstalling Oracle Vault in different versions, especially in the relink process.
 
 

1. Preparations before uninstallation

 

Oracle Vault involves several parts in the database: The dva component is bound to the OEM, internal dbowner, and manager management object and role permission adjustment as a Web App. Before the formal uninstallation operation, we need to close the database and various components.
 
The database is completely closed.

 

SQL> conn/as sysdba

Connected.

SQL> shutdown immediate;

Database closed.

Database dismounted.

ORACLE instance shut down.

 

The listener is closed.

 

[Oracle @ SimpleLinux ~] $ Lsnrctl stop

 

LSNRCTL for Linux: Version 11.2.0.4.0-Production on 28-APR-2014 13:56:27

Copyright (c) 1991,201 3, Oracle. All rights reserved.

 

Connecting to (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = SimpleLinux) (PORT = 1521 )))
 
The command completed successfully

 

The DB Console Web application is disabled.

 

[Oracle @ SimpleLinux ~] $ Emctl stop dbconsole

Oracle Enterprise Manager 11g Database Control Release 11.2.0.4.0

Copyright (c) 1996,201 3 Oracle Corporation. All rights reserved.

Https: // SimpleLinux: 1158/em/console/aboutApplication

Stopping Oracle Enterprise Manager 11g Database Control...

... Stopped.

[Oracle @ SimpleLinux ~] $ Emctl status dbconsole

Oracle Enterprise Manager 11g Database Control Release 11.2.0.4.0

Copyright (c) 1996,201 3 Oracle Corporation. All rights reserved.

Https: // SimpleLinux: 1158/em/console/aboutApplication

Oracle Enterprise Manager 11g is not running.

 

2. Disable Vault

 

Vault is a component that is not activated by default. The process of installing the Vault is actually to repackage it as an Oracle executable program. During the uninstallation process, you also need to relink the Oracle application.
 
First, perform the Disable process.

 

[Oracle @ SimpleLinux ~] $ Cd $ ORACLE_HOME/rdbms/lib

[Oracle @ SimpleLinux lib] $ make-f ins_rdbms.mk dv_off ioracle

/Usr/bin/ar d/u01/app/oracle/rdbms/lib/libknlopt. a kzvidv. o

/Usr/bin/ar cr/u01/app/oracle/rdbms/lib/libknlopt. a/u01/app/oracle/rdbms/lib/kzvnewcastle. o

Chmod 755/u01/app/oracle/bin

 

(Space reasons, omitted ......)

-Linking Oracle

Rm-f/u01/app/oracle/rdbms/lib/oracle

Gcc-o/u01/app/oracle/rdbms/lib/oracle-m32-z noexecstack-L/u01/app/oracle/rdbms/lib/-L/u01/app/ oracle/lib/-L/u01/app/oracle/lib/stubs/-L/u01/app/oracle/lib/-lirc

Mv/u01/app/oracle/rdbms/lib/oracle/u01/app/oracle/bin/oracle

Chmod 6751/u01/app/oracle/bin/oracle

 

Note: In 11gR2, you can select the chopt mode to uninstall dv.

 

[Oracle @ SimpleLinux lib] $ chopt disable dv

 

Writing to/u01/app/oracle/install/disable_dv.log...

/Usr/bin/make-f/u01/app/oracle/rdbms/lib/ins_rdbms.mk dv_off ORACLE_HOME =/u01/app/oracle
 
/Usr/bin/make-f/u01/app/oracle/rdbms/lib/ins_rdbms.mk ioracle ORACLE_HOME =/u01/app/oracle
 
 

Start the listener. Oracle usually starts automatically.

 

[Oracle @ SimpleLinux lib] $ lsnrctl start

 

LSNRCTL for Linux: Version 11.2.0.4.0-Production on 28-APR-2014 14:04:34

Copyright (c) 1991,201 3, Oracle. All rights reserved.

 

(Space reasons, omitted ......)

(DESCRIPTION = (ADDRESS = (PROTOCOL = ipc) (KEY = EXTPROC1521 )))

The listener supports no services

The command completed successfully

 

 

[Oracle @ SimpleLinux lib] $ sqlplus/nolog

 

SQL * Plus: Release 11.2.0.4.0 Production on Mon Apr 28 14:04:41 2014

 

Copyright (c) 1982,201 3, Oracle. All rights reserved.

 

SQL> conn/as sysdba

Connected.

SQL> startup

ORA-01081: cannot start already-running ORACLE-shut it down first

 

 

For more details, please continue to read the highlights on the next page:

1 2 Next Page