Security hardening hpux 11.23 itanium

[TTr]

If you look in the genclntsh script, the error

"Failed to link libclntsh.so.10.1"

appears after the following statement

${LD} ${LD_RUNTIME} ${LD_OPT} ${LD_OUT} ${LD_SELF_CONTAINED} ${OCLIENT_ON} \
${DEF_ON} ${NAUTAB} ${NAETAB} ${NAEDHS} ${SYMS_XDK} ${SYMS_SQL} \
${SYMS_PLSQL} ${SYMS_OCIC} ${SYMS_LDAP} ${SYMS_NETWORK} ${SYMS_XNET} ${OLIBS} \
${SYSLIBS} ${USRLIBS} > ${MAPFILE} 2>&1

If you notice the "> ${MAPFILE}" at the end of the long LD statement, this is where the library file libclntsh.so.10.1 is created. I still claim that the file libclntsh.so.10.1 exists and it is owned by root, that's why
the subsequent genclntsh commands when run as oracle fail.

So, if you have not yet checked for an existing libclntsh.so.10.1 file that is owned by root, do so. It would take you only a few seconds. The file should be in
$ORACLE_HOME/lib/libclntsh.so.10.1
and
$ORACLE_HOME/lib32/libclntsh.so.10.1

PS. The genclntsh script is in $ORACLE_HOME/bin

[Dennis Handly]

>are there any other variables other than the 'env' variable that we could compare against to see why one oracle user is different from the other one?

env(1) is a command that lists the exported variables.

To compare two users, you should sort then compare:
env | sort > user_A.env
...
comm -3 user_A.env user_B.env

[Jasdeep Pawar]

Did somebody find solution to this ?. I also have same type of problem for PRO*C program compilaton. My libclntsh.so file is ZERO bytes and there is no libclntsh.so.10.1 file in ORACLE_HOME.