Christoph Schuba in Solaris Security hosts a brief presentation on protecting Oracle applications with built-in Solaris Security features. Recorded during the Oracle Open World 2009 event, Schuba states that he along with Glenn Faden created a system that takes advantage of the security features available in Solaris.
Schuba specifically identifies user rights management, process rights management, servers management (SMF), containers and auditing as the security features he and Faden used to protect a Sun SPARC Enterprise X5220 server with multiple CPUs running Oracle Database 10g R2, which is used in the demonstration.
In the 6:43 minute video, Schuba demonstrates a subset of these security features. He goes through the process of how individual administrators log in, yet still have access and power to execute processes under a general role. This eliminates issues of multiple administrators having a shared login.
A user management advantage is how, with slight adjustments to the default privileges, the basic ones can be adjusted for various administrators. Therefore, some privileges for the general role may not be accessed if desired. This example also shows how an individual's actions can be singled out so that only one particular user's actions can be seen.
More Information
Schuba's presentation
Schuba's blog
Email for Schuba
Faden's blog
Email for Faden
Sun Security
[...read more...]
Other articles in the Oracle section of Volume 142, Issue 3:
Hardening the Oracle Database with Solaris Security Features
(this article)
See all archived articles in the Oracle section.
|
|
Top 10 Most Popular Articles in Current Issue (Vol 168, Issue 1)
|
|
|
|
|