Re: Is Statspack a Security Problem?

2002-07-25 Thread Yechiel Adar
Thanks Ian. Have a beer on me, you earned it with this info. Yechiel Adar Mehish - Original Message - To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> Sent: Wednesday, July 24, 2002 11:51 PM Ian, You are likely to win the wager on this one. I discovered the "public" when i

RE: Is Statspack a Security Problem?

2002-07-24 Thread Ron Rogers
Ian, You are likely to win the wager on this one. I discovered the "public" when i was trying to secure my database. There are grants to public all over the place. I would be very interested to know and understand why Oracle did grant so much to public and what can be safely revoked. Ron ROR mô¿ô

RE: Is Statspack a Security Problem?

2002-07-24 Thread MacGregor, Ian A.
Holman [mailto:[EMAIL PROTECTED]]Sent: Wednesday, July 24, 2002 11:56 AMTo: Multiple recipients of list ORACLE-LSubject: RE: Is Statspack a Security Problem?Why not just backup the spctab.sql script and then in vi do a g:/PUBLIC/s//DBA or whatever role you choose to play with statspack

RE: Is Statspack a Security Problem?

2002-07-24 Thread Rodd Holman
Why not just backup the spctab.sql script and then in vi do a g:/PUBLIC/s//DBA or whatever role you choose to play with statspack before running.  Although bind vars are still appropriate too. Rodd Holman On Wed, 2002-07-24 at 12:23, kkennedy wrote: Sounds like yet another good rea

RE: Is Statspack a Security Problem?

2002-07-24 Thread kkennedy
Sounds like yet another good reason for using bind variables 8-) Kevin Kennedy First Point Energy Corporation -Original Message- Sent: Wednesday, July 24, 2002 8:23 AM To: Multiple recipients of list ORACLE-L To wit: $grep -i grant spctab.sql grant select on STATS$SNAPSHOT_ID to

Is Statspack a Security Problem?

2002-07-24 Thread MacGregor, Ian A.
To wit: $grep -i grant spctab.sql grant select on STATS$SNAPSHOT_ID to PUBLIC; grant select onSTATS$DATABASE_INSTANCE to PUBLIC; grant select onSTATS$SNAPSHOT to PUBLIC; grant select onSTATS$FILESTATXS to PUBLIC; grant select onSTATS$TEMPSTATXS to PU