When logging in to an OCI tenancy, I noticed something interesting – there was a message bar at the top of the console reporting “Unusual traffic detected.” It turns out that there were a couple of instances in a compartment that were showing signs of potential compromise. Here’s the alert that we received when we… Read More »
As part of the process to get an Exadata rack ready for running 19c databases, many clusters have to go through an upgrade from Oracle Linux 6 to Oracle Linux 7. As part of that upgrade, Oracle took the opportunity to make several configuration changes for security purposes. One of those changes relates to the… Read More »
I have recently been installing Oracle Enterprise Manager at several sites, and one of the key requirements has been to ensure that the installation isn’t using insecure HTTPS protocols. Securing the OMS and agents typically consists of two components – ensuring that only secure SSL ciphers are being used, and shutting down protocols that have… Read More »
By default on an Oracle RAC installation, the listeners are configured to allow any database to register with them. There is no security out of the box to determine which databases may register. While this makes it easy to create new databases without worrying about listener registration, this can cause potential problems in a real environment.… Read More »