Skip to Main Content

Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Disable Oracle JVM access for users

991901Jul 10 2015 — edited Jan 11 2016

This feature request is for supported, documented and proven way for disabling any user from calling JVM/JRE at all (alter system set java_user_access='off' or even better something similar to "revoke java_user_access from resource/connect/create session") - so even in SYS owned schemas JAVA objects are not being accessible for typical users in order to reduce the attack surface (this would increase security; see recent 2014/2015 OJVM security nightmare)

Comments

Post Details

Added on Jul 10 2015
0 comments
850 views