Securing a Server Running Oracle

[Warren griggs]

Hi,

I was wondering whether anyone has a document or knows where one is on securing a server that is running oracle. I have documents on installing and configuring a bastion host but unfortunetly I do not have the time (not becasue I'm lazy!) to install and test running oracle on it.

I would like to make the server secure but do not want Oracle to stop from working!

Any help would be great.

Thanks,

Colin.

[Joaquin Gil de Vergara · Accepted solution]

comment inetd.conf lines of services that you want to use and run inetd -c

see man pages from security. you have interesting options

convert to trusted system (tsconvert)

revise $HOME/rhosts file and /etc/shells

add entries in /var/adm/inetd.sec file to allow only connection from/to particular services and IPs

define a /etc/securetty with an console entry

download a free scan port and run against the server to check active services

[harry d brown jr]

(1) make sure computer is in a secured room
(2) make sure there are NO modems attached to it
(3) make sure every account has a passwd
(4) remove the network cables

following these steps will make your server secure, though turning it off is one step better.

IMO, with oracle on your server, there aren't a lot of things you can do (other than following the above steps) to have a really secure server. If you are putting this server facing the internet, I'd suggest looking for a new job because your current employer will get hacked. And It doesn't matter if you make your host a bastian host or not. Oracle is such a security risk that it should only be placed well within your lan and not internet-facing.


live free or die
harry