I think that one of the most convenient and secure ways is to use java
stored procedures with grants given through:
dbms_java.grant_permission( <USER>, 'SYS:java.io.FilePermission',
'/home/*', 'read,write' );
--
Best regards,
Sayan Malakshinov
http://orasql.org