Setting appropriate access permissions for critical files such as the database's main configuration
During the security authentication review, the client was advised to set access permissions for critical files such as the database's main configuration file and password file.
AS-IS
-rwxr-x--x 1 oracle oinstall 179120 Aug 23 2022 lsnrctl
-rwxr-xr-x 1 oracle oinstall 0 May 4 2021 lsnrctl0
TO-BE
-rw-r--r-- 1 oracle oinstall 7381 Oct 21 2002 /u01/app/oracle/product/11.2.0.4/dbhome_1/srvm/admin/init.ora
-rw-r--r-- 1 oracle oinstall 489 Aug 24 2013 /u01/app/oracle/product/11.2.0.4/dbhome_1/hs/admin/initdg4odbc.ora
-rw-r--r-- 1 oracle oinstall 2851 May 15 2009 /u01/app/oracle/product/11.2.0.4/dbhome_1/dbs/init.ora
-rw-r----- 1 oracle oinstall 44 Aug 23 2022 /u01/app/oracle/product/11.2.0.4/dbhome_1/dbs/initIMKDB.ora
-rw-r----- 1 oracle oinstall 77 May 4 2021 /u01/app/oracle/product/11.2.0.4/dbhome_1/dbs/initg15100.ora