Got it

Failure to Roll Back the Oracle Hardening

Latest reply: Apr 3, 2016 17:00:37 1647 1 0 0 0

Hello everyone,

Symptom
During Oracle database hardening rollback through the maintenance tool, the rollback fails. Log information similar to the following is displayed:
Post-processing failure. Rollback failure: revoke execute on DBMS_OBFUSCATION_TOOLKIT from DBSNMP;(user or role 'DBSNMP' does not exist)
Post-processing failure. Rollback failure: revoke execute on UTL_FILE from APEX_030200;(cannot REVOKE privileges you did not grant)

Please help me! Thank you!


Possible Causes
The Oracle database has been hardened and its common permissions have been modified through the maintenance tool.

Procedure
Log in to the server as the oracle user.
Connect to the database.

> sqlplus / as sysdba


Run the following commands:

@$ORACLE_HOME/rdbms/admin/catsnmp.sql;
grant execute on UTL_FILE to APEX_030200;
grant execute on UTL_FILE to ORACLE_OCM;
grant execute on UTL_FILE to ORDPLUGINS;
grant execute on UTL_FILE to ORDSYS;
grant execute on UTL_FILE to WMSYS;
grant execute on UTL_FILE to XDB;
grant execute on UTL_HTTP to APEX_030200;
grant execute on UTL_HTTP to ORDPLUGINS;
grant execute on UTL_SMTP to APEX_030200;
grant execute on DBMS_OBFUSCATION_TOOLKIT to APEX_030200;
grant execute on DBMS_OBFUSCATION_TOOLKIT to DBSNMP;
grant execute on DBMS_OBFUSCATION_TOOLKIT to SYSMAN;
GRANT EXECUTE ON DBMS_LOB TO PUBLIC;
GRANT EXECUTE ON DBMS_RANDOM TO PUBLIC;
GRANT EXECUTE ON EXFSYS.DBMS_EXPFIL TO PUBLIC;
GRANT execute on DBMS_LDAP TO public;
GRANT execute on DBMS_JOB TO public;
GRANT execute on UTL_FILE TO public;
GRANT create procedure TO resource;
GRANT SELECT ANY DICTIONARY TO DBSNMP;
GRANT SELECT ANY DICTIONARY TO SYSMAN;
GRANT SELECT_CATALOG_ROLE TO SYSMAN;
GRANT OEM_MONITOR TO DBSNMP;
@$ORACLE_HOME/rdbms/admin/catsnmp.sql;

Use the MainAst to perform Oracle hardening rollback again.

View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.