1. Security Practices Guide
  2. Installation
  3. Database Operating Environment Security
  4. Maintenance

4.2.5 Maintenance

Good security practice does not end after installation. Continued maintenance tasks include:
  • Install the latest software patches.
  • Install latest operating system patches.
  • Verify user accounts - delete or lock accounts no longer required.
  • Run security software and review output.
  • Keep up to date on security issues by subscribing to security mailing lists, reading security news groups and following the latest security procedures.
  • Implement trusted file systems like NIS, NIS+ or others such as HP-UX trusted system.
  • Test the system with tools like NESSUS (network security) and CRACK (password checker).
  • Install Tripwire to detect changes to files.
  • Monitor log files including btmp, wtmp, syslog, sulog, etc. Consider setting up automatic email or paging to warn system administrators of any suspicious behaviour. Also check the snort logs.

The environment in which Oracle Applications run contributes to or detracts from overall system security. This section contains security recommendations for tightening Oracle file system security along with more some general advice guidelines for overall system hardening.

Parent topic: Database Operating Environment Security