RDA TLsecure tool can help identify potential database security risk. See the list below for checking..
ovmrac01:/apps/oracle/product/11.2.0.3/RACDB/rda
LADB01 - oracle: ./rda.pl -vT secure
Testing ...
Identification of Potential Security Risks ...
Identification of Potential Security Risks
1 Users with a default password (11g)
2 Users with a well known password
3 Users not visible in dba_users
4 Operating system authenticated user names with a password
5 Users with SYSTEM as default tablespace
6 Users and privileges from gv$pwfile_users
7 Privileges not granted by their owner
8 Listeners without a password
9 Listeners with local operating system authentication (10g and later)
10 Listeners modifiable at runtime
11 AUTHENTICATION_SERVICES value in sqlnet.ora files
12 Oracle executables owned by different users of a same group (UNIX only)
* Run all checks
Enter a menu item or . to end
> *
No comments:
Post a Comment