반응형
OS유저중 oracle유저 이외의 유저가 sqlplus등을 사용하기 위해
퍼미션을 할당하는 수순입니다.
> oracle유져로 실행함
1. 우선은 확인
ls -al $ORACLE_HOME/bin/sqlplus
-rwxr-x--x 1 oracle oinstall 72080 9月 5日 15:15 sqlplus
-rwxr-x--x 1 oracle oinstall 72080 9月 5日 15:15 sqlplus
2. 스크립트 실행
$ORACLE_HOME/install/changePerm.sh
→ Do you wish to continue (y/n) [n]: 에서 y 를 입력
→ Do you wish to continue (y/n) [n]: 에서 y 를 입력
시간이 조금 걸립니다.
3. 결과 확인
ls -al $ORACLE_HOME/bin/sqlplus
-rwxr-xr-x 1 oracle oinstall 72080 9月 5日 15:15 sqlplus
-rwxr-xr-x 1 oracle oinstall 72080 9月 5日 15:15 sqlplus
이것으로 다른 유저도 sqlplus를 사용할수 있게 되었네요..
Applies to:
Oracle Server - Enterprise Edition - Version: 9.2.0.8 to 10.2.0.3Information in this document applies to any platform.
Goal
Where is the script changePerm.sh?Solution
During patch set installation, all new files and directories are created with restricted access, by default. Users or third party applications with a different group identifier from that of the database, which try to access client-side utilities or libraries in the database home, will see permission errors when trying to access these files or directories.
changePerm.sh is a script that allows users that do not belong to the database group to access and execute files in the ORACLE_HOME directory. Only run this script when absolutely required as it will reduce security. The script (borne shell) loops through a hard-coded set of files and directories, extracts the "group" permissions, and set the "other" permissions the same as the group's permissions. By doing so, "other" users are able to execute these files and change to these directories
The script is located in the ORACLE_HOME/install directory on Unix and Linux systems (there is no equivalent for Windows). This script ships with Oracle Database versions 9.2.0.8 and Oracle 10g releases.
Output when the changePerm.sh script is executed:
$ cd $ORACLE_HOME/install
$ ./changePerm.sh
-------------------------------------------------------------------------------
Disclaimer: The purpose of this script is to relax permissions on some of the
files in the database Oracle Home so that all clients can access them.
Please note that Oracle Corporation recommends using the most restrictive file
permissions as possible for your given implementation. Running this script
should be done only after considering all security ramifications.
-------------------------------------------------------------------------------
Do you wish to continue (y/n) : y
Finished running the script successfully
Please see /tmp/changePerm_err.log for errors and /tmp/changePerm.log for the log of events
This script should be run by Oracle Software owner to relax the permission and can be run while database processes are active.
Note :
1. If you are patching Oracle RAC home, then you will need to run this script on all the nodes
2. Oracle recommends using the most restrictive file permissions possible for your given implementation. Run this script only after considering all security ramifications and only if you need to share this installation
Note :
1. If you are patching Oracle RAC home, then you will need to run this script on all the nodes
2. Oracle recommends using the most restrictive file permissions possible for your given implementation. Run this script only after considering all security ramifications and only if you need to share this installation
반응형
'ORACLE > ADMIN' 카테고리의 다른 글
Oracle Flashback (0) | 2008.12.18 |
---|---|
DICTIONARY(DICT) 뷰 (0) | 2008.12.03 |
DBNAME, SID 변경하기. (0) | 2008.11.26 |
Oracle 10.2.0.1에서 10.2.0.3으로 rman백업을 이용한 업그레이드 메모 (0) | 2008.11.21 |
[Oracle] Datafile Size 변경하기 (0) | 2008.11.19 |