Category: Database Security

Database Security

Oracle Scheduler Jobs and Database Vault

As everybody knows, the "Oracle Scheduler" is the official task manager for an Oracle Database. It is a robust and complex tool, allowing the user to create chains, parameterized intervals on several types of metrics, execution windows, etc. In most cases, when a job is created, modified and executed by its owner, there are not many …

Continue reading

How to protect CREATE PUBLIC SYNONYM against privilege escalation

During my last presentation on GUOB Tech Tour 2016 - Oracle Technology Tour LA - Brazil, I demonstrate how we could easily use the CREATE PUBLIC SYNONYM privilege to escalate and get DBA privilege. In this article, I will give you a package that I've created and I use in my systems to allow users to …

Continue reading

IMPDP failing with ORA-31625 and ORA-01031: insufficient privileges with Database Vault

Those days, I was having a lot of errors during my Import Datapump session in a Oracle 11g with Database Vault environment. As the schema was protected, first I did the overall check up making sure the user I was using to import had the DBA permission and I also gave it full access to …

Continue reading

Limiting Oracle connection based on the user's IP and other information

When a user's password expires in one of the databases that I manage, some users complain that it is an application user and the password should never expires. Thus, if the schema really should be used only by the application, I've created a process that will control this access based on the user session information, …

Continue reading

Oracle Data Guard Fast-Start Failover and Oracle Wallet

The Fast-Start Failover Observer is an Oracle Data Guard Broker component that allows the DBA automate failover tasks and have more peaceful nights of sleep. What a few DBA know, however, is that it can work in conjunction with the Oracle Wallet, so that you can remove the password of your scripts. Consider the scenario …

Continue reading