Restricting "Other" access permissions after SAP Unix/Oracle installation

[Former Member]

Hi,

our Unix support team have been reviewing security on our SAP infrastructure and want to know if it would be possible to remove access to world/other users. Looking at the SAP online help documentation. and through various forums I can't find anything that suggests what the minimum access rights could be set to on both the SAP instance and Oracle filesystems/files. Everything has been set as per installation.

SAP Instance Filesystems : - http://help.sap.com/saphelp_nw04/helpdata/en/0a/0a2e39ef6211d3a6510000e835363f/frameset.htm

SAP Oracle Filesystems :- http://help.sap.com/saphelp_nw04/helpdata/en/24/318f3ef04911d3a6510000e835363f/frameset.htm

Does anyone know what the minimum access rights could be changed to,on Unix/Oracle while still enabling the SAP standard installed system to function normally.

Regards,

Brian.

[Former Member]

I'm also looking for the same info. One of the doc http://help.sap.com/saphelp_erp2005vp/helpdata/en/5a/23882081dd934dbf9d68ca550448c6/frameset.htm says that it should be ok to remove the non-dba ids from the dba group.