RE: Using DD to Read Data from Oracle Datafiles
- From: "Kevin Closson" <kevinc@xxxxxxxxxxxxx>
- Date: Thu, 8 Feb 2007 21:28:03 -0800
She was pretty upset. It's interesting how people have gotten
entrenched into their ideas. She remains absolutely convinced that her
biggest risk of going to jail under SOX is not from the people with whom
she works every day, but the "nameless, faceless" IT drones who "control
everything" and "have their fingers in everything".
Scary, eh?
...scarey? L. Paul Bremmer and his Iraq CPA "lost" 38 Tons of cash
money...no DBAs involved there
Having said all that, it makes good sense to tighten up file permissions
on Oracle database files so that "world" has no read, write, execute
permissions at all. Then, you can read papers about BBED and "dd" and
write nefarious "C" programs to your heart's content, but without an
account with DBA privileges, you ain't going nowhere...
...Uh, I gotta part ways with you. Your DBA priveledges mean nothing if
you give a reasonable hack a shell prompt and execute priveleges for
/bin/cc
-- //www.freelists.org/webpage/oracle-l
Other related posts:
