What DBA, in their right mind, is going to give any user or developer file level access to their datafiles? That is what user and group permissions are there to restrict. All our db's have 600 level file permissions for oracle user access only. If we have to bring someone on site for using a tool such as DUL, you can bet that we dba's will either be the keyboard jockey, or breathing down the necks of the consultant as they work. Non-dba access to the datafiles is just stupid, and anyone who would allow it deserves everything they get.
Rodd On Thu, 2003-09-18 at 11:35, Mark Leith wrote: > One problem I see with giving this away "free" is that you will be supplying > a tool that allows you to extract data from the database, bypassing all > inbuilt security. A BIG "no no". I suppose that also applies to this kind of > tool even under a paid license structure. > > How many of you would shout at Cool-Tools for "giving away" a tool such as > this, that your developers can use to "hack" your data files? ;) > > Nice idea in concept - huge liability it reality. > > > -----Original Message----- > Rachel Carmichael > Sent: 18 September 2003 17:15 > To: Multiple recipients of list ORACLE-L > > > 1) it's Field Support not Tech Support that has it > 2) Oracle does not sell nor does it release the code for DUL. A field > support technician comes to your site, installs it, runs it and removes > it. You pay a fee for this. when I used it (in '98), the fee was $5k > per every 8 hour period, with a minimum of $10K as the starting fee. > > > --- Juan Miranda <[EMAIL PROTECTED]> wrote: > > I do it but there say don4t have DUL > > > > -----Mensaje original----- > > De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre de > > Tanel Poder > > Enviado el: jueves, 18 de septiembre de 2003 15:50 > > Para: Multiple recipients of list ORACLE-L > > Asunto: Re: Anyone have a copy of DUL ?? > > > > > > Call Oracle Support ;) > > > > Tanel. > > ----- Original Message ----- > > To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> > > Sent: Thursday, September 18, 2003 3:39 PM > > > > > > > > > > > > > There are DUL?s manual. > > > http://www.fors.com/velpuri2/dul_ucg8.html > > > > > > May be interesting for someone. > > > > > > > > > -----Mensaje original----- > > > De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre > > de > > > Pete Finnigan > > > Enviado el: jueves, 18 de septiembre de 2003 13:55 > > > Para: Multiple recipients of list ORACLE-L > > > Asunto: Re: How to extract data directly from a datafile ? > > > > > > > > > Hi Tanel, > > > > > > A free DUL in C would be very nice to have and to study the source > > code > > > of. maybe you should also contact Kurt van Meerbeek of jDUL project > > on > > > sourceforge, maybe you have some ideas or info he doesn't have that > > > could help his efforts or of course Richard's efforts. > > > > > > kind regards > > > > > > Pete > > > -- > > > Pete Finnigan > > > email:[EMAIL PROTECTED] > > > Web site: http://www.petefinnigan.com - Oracle security audit > > specialists > > > Book:Oracle security step-by-step Guide - see http://store.sans.org > > for > > > details. > > > > > > -- > > > Please see the official ORACLE-L FAQ: http://www.orafaq.net > > > -- > > > Author: Pete Finnigan > > > INET: [EMAIL PROTECTED] > > > > > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > > > San Diego, California -- Mailing list and web hosting > > services > > > > > --------------------------------------------------------------------- > > > To REMOVE yourself from this mailing list, send an E-Mail message > > > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > > > the message BODY, include a line containing: UNSUB ORACLE-L > > > (or the name of mailing list you want to be removed from). You may > > > also send the HELP command for other information (like > > subscribing). > > > > > > -- > > > Please see the official ORACLE-L FAQ: http://www.orafaq.net > > > -- > > > Author: Juan Miranda > > > INET: [EMAIL PROTECTED] > > > > > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > > > San Diego, California -- Mailing list and web hosting > > services > > > > > --------------------------------------------------------------------- > > > To REMOVE yourself from this mailing list, send an E-Mail message > > > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > > > the message BODY, include a line containing: UNSUB ORACLE-L > > > (or the name of mailing list you want to be removed from). You may > > > also send the HELP command for other information (like > > subscribing). > > > > > > > -- > > Please see the official ORACLE-L FAQ: http://www.orafaq.net > > -- > > Author: Tanel Poder > > INET: [EMAIL PROTECTED] > > > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > > San Diego, California -- Mailing list and web hosting services > > --------------------------------------------------------------------- > > To REMOVE yourself from this mailing list, send an E-Mail message > > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > > the message BODY, include a line containing: UNSUB ORACLE-L > > (or the name of mailing list you want to be removed from). You may > > also send the HELP command for other information (like subscribing). > > > > -- > > Please see the official ORACLE-L FAQ: http://www.orafaq.net > > -- > > Author: Juan Miranda > > INET: [EMAIL PROTECTED] > > > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > > San Diego, California -- Mailing list and web hosting services > > --------------------------------------------------------------------- > > To REMOVE yourself from this mailing list, send an E-Mail message > > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > > the message BODY, include a line containing: UNSUB ORACLE-L > > (or the name of mailing list you want to be removed from). You may > > also send the HELP command for other information (like subscribing). > > > __________________________________ > Do you Yahoo!? > Yahoo! SiteBuilder - Free, easy-to-use web site design software > http://sitebuilder.yahoo.com > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Rachel Carmichael > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.515 / Virus Database: 313 - Release Date: 01/09/2003 > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.515 / Virus Database: 313 - Release Date: 01/09/2003 > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net Rodd Holman [EMAIL PROTECTED] -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Rodd Holman INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).