[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

oracle database files location

Posted on 2013-02-07
7
Medium Priority
?
412 Views
Last Modified: 2013-02-07
I am not an oracle DBA but is there any easy way to determine where on the server, the actual database file(s) (is there more than one, for SQL server it is mdf and ldf?) are housed? i.e. a command or a query?

What are the risks if the datbase files are on say for example a share that everyone group has access to, can users copy the database files and gain access to the data - or is that a bit far fetched?
0
Comment
Question by:pma111
7 Comments
 
LVL 78

Accepted Solution

by:
slightwv (䄆 Netminder) earned 668 total points
ID: 38864062
Actual data files:
select file_name from dba_data_files;
select file_name from dba_temp_files;


Now there are additional files like online redo logs, controlf iles, spfile (database parameters).  Do you want these as well?
0
 
LVL 74

Assisted Solution

by:sdstuber
sdstuber earned 668 total points
ID: 38864069
you'll have to look in various places depening on the file types

select * from dba_data_files
select * from dba_temp_files

you can find other files like archive logs, and control files by looking in v$parameter
0
 
LVL 78

Expert Comment

by:slightwv (䄆 Netminder)
ID: 38864079
Just in case, the spfile and controlf files:
select name,value from v$parameter where name in ('spfile','control_files');

Online redo logs:
select member from v$logfile;
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
LVL 3

Author Comment

by:pma111
ID: 38864090
If a malicious admin or through poor acl a user can get file system access to these files, what's the risk?? What could they do with the files??
0
 
LVL 3

Author Comment

by:pma111
ID: 38864102
And how about oracle backups, where could you see any rman jobs configured and where its outputting the backup file to. And if the backup file is going to an insecure share, what's the risk?
0
 
LVL 78

Expert Comment

by:slightwv (䄆 Netminder)
ID: 38864108
>>What could they do with the files??

Delete them?
Copy them and they have your data.

>>where could you see any rman jobs

You can use RMAN list and report commands to see where they are going.

>>And if the backup file is going to an insecure share, what's the risk?

I can take your backups and restore them to my server.
I can delete them.
0
 
LVL 23

Assisted Solution

by:David
David earned 664 total points
ID: 38864121
"... then there's trouble in River City, friends...."

With enough privileges, any file on a storage system / drive is readable; writeable; and eraseable.  Your malicious admin could do the same with the backups.  So, it's generally a good idea to keep admins content and well rewarded.

Somewhat tongue-in-cheek to your question, but the real answer is a data bank can be destroyed in seconds.
0

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Instead of error trapping or hard-coding for non-updateable fields when using QODBC, let VBA automatically disable them when forms open. This way, users can view but not change the data. Part 1 explained how to use schema tables to do this. Part 2 h…
Microsoft Jet database engine errors can crop up out of nowhere to disrupt the working of the Exchange server. Decoding why a particular error occurs goes a long way in determining the right solution for it.
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Hi, this video explains a free download that you can incorporate into your Access databases, or use stand-alone for contact management. Contacts -- Names, Addresses, Phone Numbers, eMail Addresses, Websites, Lists, Projects, Notes, Attachments…
Suggested Courses

591 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question