oracle database files location

I am not an oracle DBA but is there any easy way to determine where on the server, the actual database file(s) (is there more than one, for SQL server it is mdf and ldf?) are housed? i.e. a command or a query?

What are the risks if the datbase files are on say for example a share that everyone group has access to, can users copy the database files and gain access to the data - or is that a bit far fetched?
LVL 3
pma111Asked:
Who is Participating?
 
slightwv (䄆 Netminder) Commented:
Actual data files:
select file_name from dba_data_files;
select file_name from dba_temp_files;


Now there are additional files like online redo logs, controlf iles, spfile (database parameters).  Do you want these as well?
0
 
sdstuberCommented:
you'll have to look in various places depening on the file types

select * from dba_data_files
select * from dba_temp_files

you can find other files like archive logs, and control files by looking in v$parameter
0
 
slightwv (䄆 Netminder) Commented:
Just in case, the spfile and controlf files:
select name,value from v$parameter where name in ('spfile','control_files');

Online redo logs:
select member from v$logfile;
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
pma111Author Commented:
If a malicious admin or through poor acl a user can get file system access to these files, what's the risk?? What could they do with the files??
0
 
pma111Author Commented:
And how about oracle backups, where could you see any rman jobs configured and where its outputting the backup file to. And if the backup file is going to an insecure share, what's the risk?
0
 
slightwv (䄆 Netminder) Commented:
>>What could they do with the files??

Delete them?
Copy them and they have your data.

>>where could you see any rman jobs

You can use RMAN list and report commands to see where they are going.

>>And if the backup file is going to an insecure share, what's the risk?

I can take your backups and restore them to my server.
I can delete them.
0
 
DavidSenior Oracle Database AdministratorCommented:
"... then there's trouble in River City, friends...."

With enough privileges, any file on a storage system / drive is readable; writeable; and eraseable.  Your malicious admin could do the same with the backups.  So, it's generally a good idea to keep admins content and well rewarded.

Somewhat tongue-in-cheek to your question, but the real answer is a data bank can be destroyed in seconds.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.