Pau Lo
asked on
oracle database files location
I am not an oracle DBA but is there any easy way to determine where on the server, the actual database file(s) (is there more than one, for SQL server it is mdf and ldf?) are housed? i.e. a command or a query?
What are the risks if the datbase files are on say for example a share that everyone group has access to, can users copy the database files and gain access to the data - or is that a bit far fetched?
What are the risks if the datbase files are on say for example a share that everyone group has access to, can users copy the database files and gain access to the data - or is that a bit far fetched?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
If a malicious admin or through poor acl a user can get file system access to these files, what's the risk?? What could they do with the files??
ASKER
And how about oracle backups, where could you see any rman jobs configured and where its outputting the backup file to. And if the backup file is going to an insecure share, what's the risk?
>>What could they do with the files??
Delete them?
Copy them and they have your data.
>>where could you see any rman jobs
You can use RMAN list and report commands to see where they are going.
>>And if the backup file is going to an insecure share, what's the risk?
I can take your backups and restore them to my server.
I can delete them.
Delete them?
Copy them and they have your data.
>>where could you see any rman jobs
You can use RMAN list and report commands to see where they are going.
>>And if the backup file is going to an insecure share, what's the risk?
I can take your backups and restore them to my server.
I can delete them.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
select name,value from v$parameter where name in ('spfile','control_files')
Online redo logs:
select member from v$logfile;