August 2016 archive

Aug 16

Oracle Scheduler Jobs and Database Vault

As everybody knows, the "Oracle Scheduler" is the official task manager for an Oracle Database. It is a robust and complex tool, allowing the user to create chains, parameterized intervals on several types of metrics, execution windows, etc. In most cases, when a job is created, modified and executed by its owner, there are not many …

Continue reading

Aug 11

AWR snapshots not being generated even though it's enabled

Those days, I was facing an issue in my Oracle Database 11.2.0.4. My AWR Snapshots were not being generated even though it was full enabled. I did some checks to be sure I had no issues: Checked that I had enough free space on SYSAUX tablespace. I was using only 5GB of the total 15GB. My control_management_pack_access was …

Continue reading

Aug 11

How to protect CREATE PUBLIC SYNONYM against privilege escalation

During my last presentation on GUOB Tech Tour 2016 - Oracle Technology Tour LA - Brazil, I demonstrate how we could easily use the CREATE PUBLIC SYNONYM privilege to escalate and get DBA privilege. In this article, I will give you a package that I've created and I use in my systems to allow users to …

Continue reading