Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Need source of scripts and commands  to capture Oracle 11G R2 Database Security posture

Posted on 2014-11-27
4
Medium Priority
?
230 Views
Last Modified: 2015-06-23
I am looking for a source of scripts to run on a Windows server hosting an Oracle 11.2 G Database.  I need to produce a report of all users and their privileges, all processes and their owners and privileges, all databases and tables, all access controls on tables, all configuration data for the database and its audit features.  This is pretty much the same raw information that the discovery/collection  part of a Database Vulnerability Analysis scanner would collect.   Another party will then analyze the results collected and decide what to do to harden the system. The primary focus is Oracle, not Windows vulnerabilities.
0
Comment
Question by:sealnose
4 Comments
 
LVL 35

Accepted Solution

by:
johnsone earned 1000 total points
ID: 40470289
Some of that is pretty easy to get.  You just need to dump the following views:

Users:
    DBA_USERS

Privileges, access controls:
    DBA_SYS_PRIVS
    DBA_ROLE_PRIVS
    DBA_TAB_PRIVS

No idea what you mean by "processes and their owners", the above views would already get the privileges if you are talking about database objects.

Not sure what you are looking for in terms of configuration data and audit features, but that is probably all contained in V$PARAMETER.

In terms of a script, you could easily write a script that goes into SQL*Plus, selects that information and spools it out to files.  I'm not a windows scripting person and not sure what kind of format you are looking for.
0
 
LVL 38

Assisted Solution

by:Geert Gruwez
Geert Gruwez earned 1000 total points
ID: 40470344
don't forget the users with default passwords
select * from dba_users_with_defpwd

or check this article for a lot more info on security
http://www.oracle.com/technetwork/articles/sql/11g-security-100258.html
0
 
LVL 23

Expert Comment

by:Steve Wales
ID: 40845984
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Checking the Alert Log in AWS RDS Oracle can be a pain through their user interface.  I made a script to download the Alert Log, look for errors, and email me the trace files.  In this article I'll describe what I did and share my script.
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question