®

1 README DB SECURITY REVIEW SCRIPTE

The scripts for evaluation the security of an Oracle database will be delivered in a zip archiv.

e.g. Scripts.zip

This zip archive includes the following files for 10g and 11g and 12c databases:

Batch file for Windows: DBSecReviewWin11g.bat

Shell-Script for Unix: DBSecRevUnix11g.sh

And the sql scripts in the folder 11g

01_configuration11g.sql
02_auditinfos11g.sql
03_availability11g.sql
04_acl11g.sql
05_additionalinfos11g.sql
06_bugs11g.sql

Please unzip the archiv in any folder you want. Be aware that an Oracle environment is set correctly
like ORACLE_SID and ORACLE_HOME (Oracle DB Client or Server-Environment).

1.1 Execution of scripts under Windows

For execution please open command tool (cmd) and call the batch file with the parameters
<account> (SYS or DBA Credentials), <passwort> and <tns alias>.

C:\OraDB\DBSecReviewWin11g.bat sys oracle db11gr2

6 log file will be generated and 5 csv files. These file have to evaluated.

1.2 Execution of scripts under (L)UNIX

For the execution of the scripts a sheel script with included menu will be delivered. This shell script
was tested only in bash Shell. The shell script reads the Oracle environment automatically
(ORACLE_SID, ORACLE_HOME, etc,), so please ensure that the environment is correctly set.
Please copy the script to DB server where the database is running. This is because the script will
communicate via IPC to the database and not via SQL*Net.

You can call the shell script from terminal as shown:

$ ./DBSecRevUnix11g.sh sys oracle

If you do not call with username and password, then username and password will be read by script.

After executing the shell script the menu is shown. You serve the menu with pressing the right key:.

Beispiele:
Key 1 and <ENTER>: Script 01_configuration11g.sql will be started
Key 2 and <ENTER>: Script 02_auditinfos11g.sql will be started
Key 3 and <ENTER>: Script 03_availability11g.sql will be started
Key 4 and <ENTER>: Script 04_acl11g.sql will be started
Key 5 and <ENTER>: Script 05_additionalinfos11g.sql will be started
Key 6 and <ENTER>: Script 06_bugs11g.sql will be started

Review: DB Security Review Service, Oracle DTCC, Schiffbauergasse 14, 14467 Potsam
Autor: Cmuetzlitz Version: 1.1 12. Februar 2013 Seite 1 von 2
 ®

Key 0 and <ENTER>: All scripts will be started

Key x and <ENTER>: Script exit

Figure 1: Shellscript Menü

7 log file will be generated and 10 csv files. These file have to evaluated.

Review: DB Security Review Service, Oracle DTCC, Schiffbauergasse 14, 14467 Potsam
Autor: Cmuetzlitz Version: 1.1 12. Februar 2013 Seite 2 von 2