readme_rdbms.htm

Debian中文参考手册,系统介绍了Debian系统

<dt CLASS="A1">
<a NAME="554372"></a><b><font face="Arial, Helvetica, sans-serif"><font size=-1>interMedia,
Oracle Spatial, and Oracle Syndication Server</font></font></b></dt>
</dl>
<a NAME="557796"></a>

<p CLASS="BP">A96120-01 Oracle interMedia Annotator User's Guide
<br><a NAME="557797"></a>

<p CLASS="BP">A96121-01 Oracle interMedia Java Classes User's Guide and
Reference
<br><a NAME="557798"></a>

<p CLASS="BP">A88786-01 Oracle interMedia User's Guide and Reference
<br><a NAME="557195"></a>

<p CLASS="BP">A96630-01 Oracle Spatial User's Guide and Reference
<br><a NAME="557199"></a>

<p CLASS="BP">A88787-01 Oracle Syndication Server User's and Administrator's
Guide
<dl CLASS="A1">
<dt CLASS="A1">
<a NAME="557790"></a><b><font face="Arial, Helvetica, sans-serif"><font size=-1>Oracle
Text Documentation</font></font></b></dt>
</dl>
<a NAME="557791"></a>

<p CLASS="BP">A96517-01 Oracle Text Application Developer's Guide
<br><a NAME="557792"></a>

<p CLASS="BP">A96518-01 Oracle Text Reference
<br><a NAME="557193"></a>
<h5 CLASS="SH2">
<font face="Arial, Helvetica, sans-serif">ADDITIONAL DOCUMENTATION</font></h5>

<dl CLASS="A1">
<dt CLASS="A1">
<a NAME="557233"></a><b><font face="Arial, Helvetica, sans-serif"><font size=-1>Oracle
Enterprise Manager</font></font></b></dt>
</dl>
<a NAME="557237"></a>

<p CLASS="BP">A96670-01 Oracle Enterprise Manager Administrators Guide
<br><a NAME="557238"></a>

<p CLASS="BP">A96673-01 Oracle Enterprise Manager Configuration Guide
<br><a NAME="557239"></a>

<p CLASS="BP">A96674-01 Oracle Enterprise Manager Concepts Guide
<br><a NAME="557240"></a>

<p CLASS="BP">A96675-01 Oracle Enterprise Manager Event Test Reference
Manual
<br><a NAME="557241"></a>

<p CLASS="BP">A96671-01 Oracle Enterprise Manager Messages Manual
<br><a NAME="562085"></a>

<p CLASS="BP">A86647-01 Database Tuning with the Oracle Tuning Pack
<br><a NAME="562086"></a>

<p CLASS="BP">A96679-01 Getting Started with Oracle Change Management Pack
<br><a NAME="562087"></a>

<p CLASS="BP">A88720-01 Getting Started with Oracle Management Pack for
Oracle Applications
<br><a NAME="562088"></a>

<p CLASS="BP">A88748-01 Getting Started with the Oracle Diagnostics Pack
<br><a NAME="562089"></a>

<p CLASS="BP">A96680-01 Getting Started with the Oracle Standard Management
Pack
<dl CLASS="A1">
<dt CLASS="A1">
<a NAME="557252"></a><b><font face="Arial, Helvetica, sans-serif"><font size=-1>Java</font></font></b></dt>
</dl>
<a NAME="557256"></a>

<p CLASS="BP">A96656-01 Oracle9<i>i</i> Java Developers Guide
<br><a NAME="557257"></a>

<p CLASS="BP">A96659-01 Oracle9<i>i</i> Java Stored Procedures Developers
Guide
<br><a NAME="557258"></a>

<p CLASS="BP">A96654-01 Oracle9<i>i</i> JDBC Developers Guide and Reference
<br><a NAME="557259"></a>

<p CLASS="BP">A96658-01 Oracle9<i>i</i> JPublisher Users Guide
<br><a NAME="557260"></a>

<p CLASS="BP">A96655-01 Oracle9<i>i</i> SQLJ Developers Guide and Reference
<br><a NAME="557261"></a>

<p CLASS="BP">A96657-01 Oracle9<i>i</i> Support for JavaServer Pages Reference
<dl CLASS="A1">
<dt CLASS="A1">
<a NAME="557253"></a><b><font face="Arial, Helvetica, sans-serif"><font size=-1>OLAP</font></font></b></dt>
</dl>
<a NAME="557292"></a>

<p CLASS="BP">A95297-01 Oracle9<i>i</i> OLAP Developer's Guide to the OLAP
API
<br><a NAME="557293"></a>

<p CLASS="BP">A95298-01 Oracle9<i>i</i> OLAP Developer's Guide to the OLAP
DML
<br><a NAME="557294"></a>

<p CLASS="BP">A95295-01 Oracle9<i>i</i> OLAP User's Guide
<dl CLASS="A1">
<dt CLASS="A1">
<a NAME="557297"></a><b><font face="Arial, Helvetica, sans-serif"><font size=-1>Workflow</font></font></b></dt>
</dl>
<a NAME="557300"></a>

<p CLASS="BP">A96644-01 Oracle Workflow Client Installation Notes (release
2.6.2)
<br><a NAME="557301"></a>

<p CLASS="BP">A95265-03 Oracle Workflow Guide (release 2.6.2)
<br><a NAME="557302"></a>

<p CLASS="BP">A96643-01 Oracle Workflow Server Installation Notes (release
2.6.2)
<dl CLASS="A1">
<dt CLASS="A1">
<a NAME="557225"></a><b><font face="Arial, Helvetica, sans-serif"><font size=-1>Other
Documentation</font></font></b></dt>
</dl>
<a NAME="557313"></a>

<p CLASS="BP">A88783-01 Oracle Dynamic Services User's and Administrator's
Guide
<br><a NAME="557319"></a>

<p CLASS="BP">A96676-01 Oracle Intelligent Agent Users Guide
<br><a NAME="557320"></a>

<p CLASS="BP">A96672-01 Oracle SNMP Support Reference Guide
<br><a NAME="557321"></a>

<p CLASS="BP">A96690-01 Oracle Universal Installer Concepts Guide
<br><a NAME="557322"></a>

<p CLASS="BP">A97204-01 Oracle Ultra Search Online Documentation
<br><a NAME="555971"></a><!--TOC=h1-"555971"-->
<h2 CLASS="H1">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">2 DATABASE
SECURITY</font></font></h2>
<!--/TOC=h1--><a NAME="562146"></a><!--TOC=h2-"562146"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">2.1 The
Security Checklist</font></font></h3>
<!--/TOC=h2--><a NAME="561194"></a>

<p CLASS="BP">In order to fully maximize the security features offered
by Oracle9<i>i</i>, Release 2 (9.2), it is imperative that Oracle9<i>i</i>
itself is well protected. To provide guidance for configuring Oracle9<i>i</i>
in a secure manner, Oracle provides a security checklist. Oracle recommends
that you read this checklist and configure your database accordingly. The
security checklist can be found at the following URL:
<pre CLASS="CE"><a NAME="561250"></a><a href="http://otn.oracle.com/deploy/security/oracle9i/pdf/9iR2_checklist.pdf">http://otn.oracle.com/deploy/security/oracle9i/pdf/9iR2_checklist.pdf</a>
<a NAME="561272"></a></pre>
<a NAME="561252"></a>

<p CLASS="BP">Note that Chapter 23, "Establishing Security Policies", of
the <i>Oracle9</i>i <i>Database Administrator's Guide</i>, Release 2, also
contains a copy of the security checklist. However, the checklist has been
updated since the close date for publication of the book. Please refer
to the listed URL for the most recent version of the security checklist.
<br><a NAME="561382"></a><!--TOC=h2-"561382"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">2.2 Database
User Accounts Locked</font></font></h3>
<!--/TOC=h2--><a NAME="562170"></a>

<p CLASS="BP">In Oracle9<i>i</i>, Release 2 (9.2), all default database
user accounts except <tt>SYS</tt>, <tt>SYSTEM</tt>, <tt>SCOTT</tt>, and
<tt>DBSNMP</tt> are locked upon database creation using the Database Configuration
Assistant (DBCA).
<br><a NAME="562178"></a>

<p CLASS="BP">At the end of the database creation process, the DBCA displays
a page requiring that you change the default passwords for user accounts
<tt>SYS</tt> and <tt>SYSTEM</tt>. This page prompts you to enter and confirm
new passwords for the <tt>SYS</tt> and <tt>SYSTEM</tt> user accounts. It
also provides access to a password management page that enables you to
selectively unlock and specify new passwords for other Oracle9<i>i</i>
default user accounts.
<br><a NAME="565403"></a>

<p CLASS="BP">If you create a database using the DBCA in silent mode, and
pass the <tt>-passwordDialog true</tt> parameter, then Oracle also presents
a dialog requiring that you change the default passwords for user accounts
<tt>SYS</tt> and <tt>SYSTEM</tt>.
<br><a NAME="562180"></a>

<p CLASS="BP">You can optionally activate locked accounts manually at a
later time by using, for example, an <tt>ALTER</tt> <tt>USER</tt> statement.
<br><a NAME="561384"></a><!--TOC=h2-"561384"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">2.3 Data
Dictionary Protection</font></font></h3>
<!--/TOC=h2--><a NAME="561385"></a>

<p CLASS="BP">Data dictionary protection is now enabled by default. Specifically,
the <tt>O7_DICTIONARY_ACCESSIBILITY</tt> initalization parameter is set
to <tt>FALSE</tt> on installation. As a result, regular users who are not
database administrators with <tt>ANY</tt> privileges (for example, <tt>SELECT
ANY TABLE</tt>) can no longer use the <tt>ANY</tt> privilege upon data
dictionary objects; however, the user can access non-SYS schema objects
using the <tt>ANY</tt> privilege.
<br><a NAME="561386"></a>

<p CLASS="BP">Users making a database administrator user type connection
(for example, <tt>CONNECT</tt> <tt>/</tt> <tt>AS</tt> <tt>SYSBDA</tt>)
can exercise privilege on data dictionary objects, since <tt>SYSDBA</tt>
has all privileges.
<br><a NAME="561387"></a>

<p CLASS="BP">A new system privilege, <tt>SELECT ANY DICTIONARY</tt>, provides
users with <tt>SELECT</tt> access to any object in the <tt>SYS</tt> schema
without giving them DBA privileges.
<br><a NAME="561388"></a>

<p CLASS="BP">For example,
<ul>
<ul><a NAME="561389"></a>

<p CLASS="BP2">Fred, a non-DBA user, has the <tt>SELECT ANY TABLE</tt>
privilege. He is able to view tables in his schema, and other non-SYS schemas.
Fred is a developer and requires <tt>SELECT</tt> access to data dictionary
objects. A database administrator can grant Fred <tt>SELECT ANY DICTIONARY</tt>
privilege to allow Fred to select, but not update, dictionary objects.</ul>
</ul>
<a NAME="561390"></a>

<p CLASS="BP">Oracle Corporation recommends that the dictionary protection
feature remain enabled as it is a more secure configuration. If <tt>O7_DICTIONARY_ACCESSIBILITY</tt>
is set to <tt>TRUE</tt>, then regular users with the <tt>ANY</tt> privilege
can use these privileges -- perhaps maliciously -- to alter data dictionary
objects.
<br><a NAME="561391"></a><!--TOC=h2-"561391"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">2.4 Fine
Grained Access Control</font></font></h3>
<!--/TOC=h2--><a NAME="561392"></a>

<p CLASS="BP">Due to stringent access control enforced by Fine Grained
Access Control, queries that are subjected to any policy predicate may
encounter <tt>ORA-28133</tt> when attempting to execute a DDL statement
against the VPD-enabled object. The workaround is to temporarily disable
VPD or use <tt>EXEMPT ACCESS POLICY</tt> privilege to complete the DDL
changes. Please also report this error as a bug. The exceptions to this
are <tt>DBMS_STATS</tt> and <tt>ALTER</tt> <tt>TABLE</tt> <tt>..</tt> <tt>ADD</tt>
<tt>COLUMN</tt> with <tt>DEFAULT</tt> value.
<br><a NAME="561393"></a><!--TOC=h2-"561393"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">2.5 Resource
Profiles</font></font></h3>
<!--/TOC=h2--><a NAME="561394"></a>

<p CLASS="BP">When session resource limits are exceeded, the session will
be automatically closed.
<br><a NAME="562235"></a><!--TOC=h1-"562235"-->
<h2 CLASS="H1">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">3 REAL
APPLICATION CLUSTERS</font></font></h2>
<!--/TOC=h1--><a NAME="562237"></a><!--TOC=h2-"562237"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">3.1 Tablespace
Size Recommendations</font></font></h3>
<!--/TOC=h2--><a NAME="562240"></a>

<p CLASS="BP">The tablespace size recommendations shown in Table 2-1 of
<i>Oracle9</i>i <i>Real Application Clusters Setup and Configuration</i>
have increased for four of the tablespaces as follows:
<pre CLASS="CE"><a NAME="562244"></a>SYSTEM -- 420MB
<a NAME="562245"></a>TEMP -- 120MB
<a NAME="562246"></a>UNDOTBS -- 320MB
<a NAME="562247"></a>ODM -- 280MB</pre>
<a NAME="562909"></a><!--TOC=h2-"562909"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">3.2 Real
Application Clusters Deployment and Performance Monitoring</font></font></h3>
<!--/TOC=h2--><a NAME="562913"></a>

<p CLASS="BP">Only use <tt>oradebug</tt> commands as documented in <i>Oracle9</i>i
<i>Real Application Clusters Deployment and Performance</i> with the supervision
of Oracle Support.
<br><a NAME="565623"></a><!--TOC=h2-"565623"-->
<h3 CLASS="H2">
<font face="Arial, Helvetica, sans-serif"><font color="#330099">3.3 Incorrect
Reference to XML DB Tablespace</font></font></h3>
<!--/TOC=h2--><a NAME="565637"></a>

<p CLASS="BP">The tablespace for the Oracle XML DB feature is incorrectly
referred to as the <tt>XML</tt> tablespace, and its datafile file name
contains the string <tt>xml</tt> instead of <tt>xdb</tt>.
<br><a NAME="565628"></a>
<h5 CLASS="SH3">
<font face="Arial, Helvetica, sans-serif">Workaround</font></h5>
<a NAME="565644"></a>

<p CLASS="BP">In <i>Oracle9</i>i<i> Real Application Clusters Setup and
Configuration</i> Release 2 (9.2), change the references to <tt>XML</tt>