Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
I have just made a small update to all of my audit scripts that are available on my Oracle security tools page. Norman Dunbar emailed me to let me know that i needed to add "whenever sqlerror continue" at the end of my scripts to prevent any subsequent error from barfing SQL*Plus. So I have added this line to the end of each of the scripts; find_all_privs.sql, who_can_access.sql, who_has_priv.sql, who_has_role.sql and check_parameter.sql. I have also corrected a small spelling mistake in the check_parameter.sql output.
These scripts can be used to audit which roles and privileges a user has, which users and roles can access an object, which users and roles have a particular role and also the users and roles that have a particular system privilege. check_parameter.sql can also list the details of any initialisation parameter.
All scripts can print the results to a file or to the screen. Also each report is hierarchical, so that roles granted to roles etc are displayed.
These scripts have been very popular in terms of download, so if you are using them and find them useful you may want to get the updated versions.
Simply connect PFCLScan to your Oracle database and it will automatically discover the security issues that could make your Oracle database vulnerable to attack and to the potential loss of your data.
PFCLObfuscate is the only tool available that can automatically add license controls to your PL/SQL code. PFCLObfuscate protects your Intellectual Property invested in your PL/SQL database code.
PFCLTraining is a set of expert training classes for you, aimed at teaching how to audit your own Oracle database, design audit trails, secure code in PL/SQL and secure and lock down your Oracle database.
Choose PFCLServices to add PeteFinnigan.com Ltd to your team for your Oracle Security needs. We are experts in performing detailed security audits, data security design work and policy creation