Free shell scripts and C code for use in checking Oracle security or assisting in configuration are available from here. See Oracle security white papers for some great links to Oracle security information.