oracle 8.1.4 writtable files

[Ratzie]

We are doing a security audit on world writable files.
ORACLE_HOME has a crap load of other writable files.
Can these be changed to:
chmod o-w *

./javavm/demo/*
./Apache/*
./otrace/admin
./network/admin/sqlnet.log
./network/log/listerner.log
./bin/*
./bin/*

[Ben Dehner · Accepted solution]

Ouch. It almost looks like there was a bad umask when Oracle was installed.

In my experience, none of that stuff ever has to be world-writable. I checked out our 8.1.7 and 7.3.4 installs, and nothing was world-write. You should be safe doing the "chmod o-w *"

[T G Manikandan]

Yeah, you need to check your umask on the server.

$umask

it should be 022 generally.

yeah, you can remove the write permissions for the others group and the directories you have pointed above are the ones related to log files mostly.
BTW, can you give a listing of your ./bin directory before we change the permissions.Thanks