Category: Oracle Database General

Oracle Database General

How to protect CREATE PUBLIC SYNONYM against privilege escalation

During my last presentation on GUOB Tech Tour 2016 - Oracle Technology Tour LA - Brazil, I demonstrate how we could easily use the CREATE PUBLIC SYNONYM privilege to escalate and get DBA privilege. In this article, I will give you a package that I've created and I use in my systems to allow users to …

Continue reading

ORA-00600: internal error code, arguments: [kpdbSwitchPreRestore: txn] in Oracle Database 12c

On several Oracle DB in 12.1.0.2 version I started receiving some strange ORA-00600 and ORA-07445 errors in the alert file. In ORA-00600, the first parameter was "[kpdbSwitchPreRestore: txn]": Exception [type: SIGSEGV, Address not mapped to object] [ADDR:0xFAC8] [PC:0x7A1FA6E, qksanEndSession()+30] [flags: 0x0, count: 1] Errors in file /u02/diag/rdbms/cdbtim01/cdbtim01/trace/cdbtim01_j004_21773.trc (incident=57639): ORA-07445: exception encountered: core dump [qksanEndSession()+30] [SIGSEGV] [ADDR:0xFAC8] [PC:0x7A1FA6E] …

Continue reading

OPatch auto is not patching Database Home

Sometimes I face a situation where the following command finishes successfully, however, RAC database ORACLE_HOME is not patched: # opatch auto -ocmrf There are 2 situations where this happens: 1. The GI home and RAC database home are under different Patch Sets (until 4th digit) i.e. : GI is 11.2.0.4 and RAC is 11.2.0.3 GI …

Continue reading

opatch auto failing "Can't locate Switch.pm in @INC"

Those days, when trying to run "opatch auto" on a Enterprise Linux 7 server to automatically patch my GI Home and all the Database Homes, I faced the following error: [root@localhost 20834621]# opatch auto ./20485808 -ocmrf /tmp/ocm.rsp Can't locate Switch.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at /u01/app/11.2.4/grid/OPatch/crs/auto_patch.pl line 2730. BEGIN …

Continue reading

Oracle 12c - ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege

Those days, while adding a new PDB to my Oracle 12c database (PSU 12.1.0.2.3), I got the following error in my dbca: [Thread-50] [ 2015-06-30 16:50:36.315 BRT ] [BasicStep.handleNonIgnorableError:480] ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege There is an Oracle Support Document 17182200.8 (Bug 17182200 - SET CONTAINER reports ORA-1035 even with restricted …

Continue reading