$ORACLE_HOME/bin file owenership/permissions

[Former Member]

Hi,

Following an audit, I've been tasked to investigate and amend the following files contained within directory $ORACLE_HOME/bin

- extjob

- nmb

- nmo

- oradism

Currently these files are owned by root. All the other files in this directory are owned by ora<sid>. The auditors are saying that these four files should also be owned by ora<sid>?

We haven't changed the ownership of these files. This is how they have been since we upgraded our DB from 9.2 to 10.2. Also, we're running on AIX.

Could somebody please advise how the $ORACLE_HOME/bin and the files/executables contained within this directory should be configured in terms of ownership and permissions?

Thanks in advance.

Regards,

Wes Lomas

[markus_doehr2 · Accepted solution]

> - extjob

> - nmb

> - nmo

Those three belong to Enterprise Manager. They have the owner root and the sticky bit set because EM needs to get OS information that is only available as root. You can set the ownership to ora<SID> but specific functionality may not work that requires and effective user root. If you didn't configure/use OEM alltogether you can change those permissions.

> - oradism

This is the ISM/DISM ((Dynamic) Intimate Shared Memory) process helper, it locks memory in a special memory class that won't get swapped out. For this purpose the effective user should be root. AIX doesn't have that functionality built in (only Solaris) so you can change those permissions.

Markus