I prefer to remove permissions by doing: rm *O :) From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Crisler, Jon Sent: Wednesday, April 14, 2010 5:24 PM To: post.ethan@xxxxxxxxx; oracle-l Subject: RE: Removing all permissions from oracleO and other O files. Hmm....those files are just the backup files of the current executables. Anytime you run a relink, the current file is renamed to *O. I would think you should do this to oracleO and listener files, sqlplus, utilizes etc. Seems to me you are correct- if your going to do it, do it to all of them. From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Ethan Post Sent: Wednesday, April 14, 2010 5:20 PM To: oracle-l Subject: Removing all permissions from oracleO and other O files. Some of the security docs I am reading recommend removing all permissions from oracleO file in ORACLE_HOME/bin. Any reason we wouldn't just apply this rule to all of the *O files?