Oracle9iAS and security

[Elena Leontieva]

Hi,

Anybody who is running Oracle9iAS/Web server on HP-UX 11i, do you know of any security measures that should be in place?

Thanks,
Elena.

[Stan_17 · Accepted solution]

Hi Elena,

check this out http://otn.oracle.com/deploy/security/oracle9iAS/index.html

[Yogeeraj_1]

hi elena.

Do you mean at the OS level?
You would normally:
- Apply operating system Vendor recommended security patches
- Disable unused or unneeded services
- Remove any operating system samples or example code
- Remove any users that are not in use
- Consider moving to SSH and disable telnet/ftp

At the Application Server level:
You will have to keep updated at the following URL:
http://otn.oracle.com/deploy/security/alerts.htm

At the Application level, you may also look at Oracleâ s JAAS Provider which provides key security services for:
â ¢ authentication (identifying users)
â ¢ authorization (limiting what they can do)
â ¢ delegation (enabling code to run securely, with privileges of other users).

hope this helps!
rega

[Yogeeraj_1]

Attached a document about Securing Oracle9iAS (although for 1.0.2.x, is still valid for newer versions)