|
Object Name |
Comments |
| Profiles |
| Default PROFILE |
The DEFAULT profile grants unlimited capabilities to every user. Letting any user/schema have this profile is irresponsible. Use the Profile's page here at DBSecWorx as a guide for how to avoid Ragnarök. |
| Roles |
| Connect |
After cleaning up the mess that was the original CONNECT role, with the advent of the Container Database Oracle messed it up again by adding a totally unnecessary and dangerous privilege: SET CONTAINER.
This role should never be granted to any user. |
| Resource |
Unfortunately Oracle has never cleaned up the gross over-privileging in this role. This role should never be granted to any user/ |
| DBA |
Unfortunately Oracle has never cleaned up the gross over-privileging in this role. This role should never be granted to any user/ |
| Grant EXECUTE To Public |
| DBMS_PREPROCESSOR |
??? |
| UTL_CALL_STACK |
Do users with only the CREATE SESSION privilege need to be able to read call stack messages? |
| UTL_COMPRESS |
Do users with only the CREATE SESSION privilege need to be able to compress LOBs? |
| UTL_ENCODE |
Do users with only the CREATE SESSION privilege need to encode strings? |
| UTL_FILE |
Do users with only the CREATE SESSION privilege need to be able to write ad hoc data to physical files? |
| UTL_HTTP |
Do users with only the CREATE SESSION privilege need to be able to download websites into the database? |
| UTL_I18N |
Do users with only the CREATE SESSION privilege need to be able encode strings? |
| UTL_INADDR |
Do users with only the CREATE SESSION privilege need to be able interrogate IP addresses and host names? |
| UTL_MAIL |
Do users with only the CREATE SESSION privilege need to be able to email data out of the database? |
| UTL_RAW |
Do users with only the CREATE SESSION privilege need to convert strings to RAW? |
| UTL_REF |
|
| UTL_SMTP |
Do users with only the CREATE SESSION privilege need to be able to email data out of the database? |
| UTL_TCP |
Do users with only the CREATE SESSION privilege need to be able to make ad hoc TCP/IP connections? |
| UTL_URL |
|
| Grant SELECT To Public |
| ALL_SOURCE |
|
| ALL_SOURCE_AE |
|
| USER_SOURCE |
|
| USER_SOURCE_AE |
|
| U |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|