Listener Security - running the listener under a different Unix account

 Hello,

I've gone through various hardening docs (example CIS - Centre of Internet Security) for the database and listener but I still have a question regarding listener security that I hope someone can help with.  I'm using Oracle 10g R2 on Solaris 10.

Specifically, I'm trying to set up a second unix account to run the listener.  The account is on the same server as the database software - not remote.  I have it working, but have a few questions.  I am hoping others out there have done this and can offer some suggestions.

Here is what I have done:

I have 2 unix accounts and 2 groups.