0 Replies Latest reply: May 1, 2013 11:18 PM by 1000092 RSS

    To Know the Risk with  dbms_java.grant_permission

    1000092
      Hi Everyone,

      I am Using dbms_java.grant_permission to give the grant for java execution.

      begin dbms_java.grant_permission('****','java.net.SocketPermission','***.****.co.in','connect,resolve'); end;
      begin dbms_java.grant_permission('****','java.net.SocketPermission', '***.****.co.in','resolve'); end;
      begin dbms_java.grant_permission('****','java.net.SocketPermission', '***.****.co.in','connect'); end;
      begin dbms_java.grant_permission('SYS','SYS:java.net.SocketPermission','***.****.co.in','connect,resolve'); end;
      begin dbms_java.grant_permission('****','java.net.SocketPermission','*','connect,resolve'); end;

      begin dbms_java.grant_permission( '****', 'SYS:java.util.PropertyPermission','java.security.egd', 'read,write' ); end;
      begin dbms_java.grant_permission( '****', 'java.util.PropertyPermission','java.security.egd', 'read,write' ); end;
      begin dbms_java.grant_permission('****', 'java.util.PropertyPermission','*','read,write'); end;
      begin dbms_java.grant_permission('****', 'java.io.FilePermission','*','read,write'); end;
      begin dbms_java.grant_permission('****','java.util.PropertyPermission', '*','read,write');
      call dbms_java.grant_permission('****', 'java.util.PropertyPermission','*','read,write');


      is there any security related problem if i am giving above grant in my DBMS.
      Please give me your valuable opinion on this.

      Thanks in Advance.