0 Replies Latest reply: Dec 5, 2012 12:05 PM by Daryl E. RSS

    EM12C: Exadata Plugin - big security hole?

    Daryl E.
      The docs say to have sudo priviledges given as stated:
      2. add the following line to the sudoers file on each database server using visudo command
       oracle ALL=(root) NOPASSWD:/tmp/root_exachk.sh

      Perhaps I dont know enough about linux and sudo, if thats the case, please enlighten me...

      Cant you just create a file called /tmp/root_exachk.sh that contains .. oh perhaps "rm -rf /*"
      and
      sudo /tmp/root_exachk.sh

      ??

      Daryl