suid

[David Bellamy]

hi all,

is it possible to give a regular oracle user oracle rites (shut or strtup)without him being root or oracle. is sticky bit a good way to go

tnx in advance

[Rob Smith]

Hi, you can do it by suid ing the commands you are talking about but if you are concerned about security you should procees carefully. You might want to look at sudo which allows the delegation of root privelages as well. Hope this helps.

Rob

[Brian Bientz]

Do you just want some users to be able to shutdown and startup the database without logging in as the "oracle" user? If so, as long as they are a member of the dba or oper group, they can startup and shutdown the database. Furthermore, you can grant SYSDBA and SYSOPER privileges to users so that they can perform some of these functions remotely.

[Tim D Fulford]

set uid is possible, with some security caveats.

I believe there is a default oracle group called something like dbasys or DBASYS. users in this group can do Oracle startups/shutdowns etc. This bypasses writing a suid script.