Call: +44 (0)1904 557620 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "Mining Data from the Listener Log"] [Next entry: "In memory backdoors in Oracle"]

emkey and the importance of it in Grid Control security



I had an email from Paul Vallee to let me know of a good post on the pythian blog written by Grégory Guillou titled http://www.pythian.com/blogs/736/oracle-grid-control-the-importance-of-deleting-the-emkey - (broken link) Oracle Grid Control: The Importance of Deleting the emkey. The title doesnt shout out Oracle security but its clearly about this subject, my favourite subject. I was aware of this issue and have included the decrypt code in previous presentations but this is a really good article that covers the subject very well. Oracle also provides some documentation on http://download-uk.oracle.com/docs/cd/B14099_19/manage.1012/b16242/security2.htm - (broken link) enterprise manager security which is not bad and covers the commands used in more detail.