Template:SQWareProduction sqwora CheckInstance.ksh presentation

From Wiki_dbSQWare
Jump to: navigation, search


Check instance (security, parameters, ...)
Results can be put in SQWareRepository
Summary of checks:

  • Unusable indexes
  • Recovery Objects in default TBS of instance (prevents partial clone recovery)
  • Useless quotas (TEMPORARY, ...)
  • Users objects in SYSTEM TBS
  • System objects not in SYSTEM TBS
  • Users with SYSTEM default tablespace
  • Users with admin role ganted ('DBA', 'IMP_FULL_DATABASE')
  • Users with deprecated role ganted ('RESOURCE', 'CONNECT')
  • Users with system privileges ganted ('UNLIMITED TABLESPACE','DROP USER','ALTER SYSTEM')
  • Users with ANY privileges ganted (like '% ANY%', 'SELECT ANY DICTIONARY')
  • Dangerous quotas (SYSTEM, default TBS of instance)
  • Dangerous init parameters ('remote_os_authent','remote_os_roles','O7_DICTIONARY_ACCESSIBILITY')
  • Plubic execute privilege on ('UTL_TCP','UTL_FILE','UTL_HTTP','UTL_SMTP','DBMS_LOB','DBMS_SQL','DBMS_SCHEDULER','OWA_UTIL')