Forum Stats

  • 3,815,988 Users
  • 2,259,125 Discussions
  • 7,893,356 Comments

Discussions

Disable Oracle JVM access for users

991901
991901 Member Posts: 1
edited Jan 11, 2016 6:17PM in Database Ideas - Ideas

This feature request is for supported, documented and proven way for disabling any user from calling JVM/JRE at all (alter system set java_user_access='off' or even better something similar to "revoke java_user_access from resource/connect/create session") - so even in SYS owned schemas JAVA objects are not being accessible for typical users in order to reduce the attack surface (this would increase security; see recent 2014/2015 OJVM security nightmare)

ctriebPravin Takpireborneselsysassysdbadawlish23Lothar FlatzEmad Al-Mousatop.gunManish ChaturvediAndreas Huberuser120205551701707Jeremy ThompsonN.B.user6877530JustAnotherDBAulohmannUser_9GEWMLuis Vasquez3532378gaverillmuggy.d
22 votes

Active · Last Updated