RE: oracle binaries and datafiles

  • From: "Reen, Elizabeth " <dmarc-noreply@xxxxxxxxxxxxx> (Redacted sender "elizabeth.reen" for DMARC)
  • To: "'neil_chandler@xxxxxxxxxxx'" <neil_chandler@xxxxxxxxxxx>, "mwf@xxxxxxxx" <mwf@xxxxxxxx>
  • Date: Mon, 2 Apr 2018 17:56:15 +0000

        The easiest way to keep them from being deleted is not to name them 
.log.  

Liz



-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On ;
Behalf Of Neil Chandler
Sent: Monday, April 02, 2018 1:41 PM
To: mwf@xxxxxxxx
Cc: gogala.mladen@xxxxxxxxx; oracle-l@xxxxxxxxxxxxx
Subject: Re: oracle binaries and datafiles

Using the ASM Filter driver can help protect against most casual admin 
accidents, like dd-ing you device into oblivion, or runaway â€œcleanup” 
scripts - but nothing can stop a determined admin who has an experience bucket 
not yet full, and a leaky luck bucket.



Neil.

sent from my phone



On 2 Apr 2018, at 16:50, Mark W. Farnham <mwf@xxxxxxxx> wrote:



Point well taken.



There is some value, but not real security, in forcing a sysadmin off her 
meds (or simply incompletely trained) to destroy a whole mount point in that 
you might at least force some conscious thought and evade trivial cleanup 
shell scripts.



A determined agent with the requisite authority can destroy pretty much 
anything.



mwf



-----Original Message-----

From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On ;
Behalf Of Mladen Gogala

Sent: Sunday, April 01, 2018 12:24 AM

To: oracle-l@xxxxxxxxxxxxx

Subject: Re: oracle binaries and datafiles



The concept you described below is known as "security by obscurity". I am not 
a great believer.





On 03/28/2018 04:13 PM, Justin Mungal wrote:

Tim mentioned ASM... there are many benefits to it that are mentioned 

in the documentation, but it also adds protection to your database 

from non-Oracle people. A system admin wanting to free up filesystem 

space can't delete redo1.log if it's stored somewhere he doesn't know 

how to access.





-- 

Mladen Gogala

Database Consultant

Tel: (347) 321-1217



--

https://urldefense.proofpoint.com/v2/url?u=http-3A__www.freelists.org_webpage_oracle-2Dl&d=DwIGaQ&c=j-EkbjBYwkAB4f8ZbVn1Fw&r=yWMFosURAngbt8VLeJtKLVJGefQxustAZ9UxecV7xpc&m=toLPFVpsMyLhhwlNHw2qbRUtPe9ibmMS-nWfs4aiAlA&s=sbY5AmG_vOBZvEVMMOhPQqf8vnL_jpFdH74a7b25uOI&e=





--

https://urldefense.proofpoint.com/v2/url?u=http-3A__www.freelists.org_webpage_oracle-2Dl&d=DwIGaQ&c=j-EkbjBYwkAB4f8ZbVn1Fw&r=yWMFosURAngbt8VLeJtKLVJGefQxustAZ9UxecV7xpc&m=toLPFVpsMyLhhwlNHw2qbRUtPe9ibmMS-nWfs4aiAlA&s=sbY5AmG_vOBZvEVMMOhPQqf8vnL_jpFdH74a7b25uOI&e=





†Ûiÿü0ÁúÞzX¬¶Ê+ƒün– {ú+iÉ^

Other related posts: