• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 702
  • Last Modified:

who can access the database server (AIX and Oracle)

I am trying to do some risk assessment work on which users can access an Oracle database on an AIX IBM server. I am more comfortable with MSSQL on Windows Server, typically we would check on Windows:

1) Local users and group memberships (including nested domain groups
2) Users granted access to shares on the servers (via share/directory access control lists)
3) Users granted access to the MSSQL database itself (via MSSQL authentication or windows authentication)

I could do with coming up with a similar checklist for Oracle on AIX IBM. I.e. any user who has some degree of access to the Server that hosts the actual database. My view was even though the OS account may not have access to the Database, they may be able to copy off the actual database files and/or any backups. 1-3 may not be enough, happy to get any feedback on other potential routes for some form of access to the server.
1 Solution
1) Check all OS accounts with membership in the "dba" group.
2) The above accounts will have access to the disks/directories owned by the account plus other disks/directories where the 'dba" group has read/write and/or execute permissions.
3) Same as #1 plus any other account not in the dba group but defined in the Oracle database as "externally identified", plus the normal database accounts.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Build your data science skills into a career

Are you ready to take your data science career to the next step, or break into data science? With Springboard’s Data Science Career Track, you’ll master data science topics, have personalized career guidance, weekly calls with a data science expert, and a job guarantee.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now