📄 post-inst.htm
字号:
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//en"
"http://www.w3c.org/TR/1999/PR-xhtml1-19991210/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" sml:lang="en" lang="en">
<head>
<!-- Run date = May 3, 2002 13:14:24 -->
<meta name="XHTML Generator" content="Oracle SGML to XHTML converter - Version 3.1.2">
<title> Post-Installation</title>
<link rel="next" href="appa_prod.htm" title="Next">
</head>
<body bgcolor="#ffffff">
<a id="top" name="top"></a>
<a href="#BEGIN">Skip Headers</a><br><br>
<table cellspacing="0" cellpadding="0" width="100%">
<tr>
<td align="left" valign="top"><font face="helvetica, arial, sans-serif">
<b>Oracle9<em>i</em> Installation Guide </b>
<br />
<b>Release 2 (9.2.0.1.0) for UNIX Systems: AIX-Based Systems, Compaq Tru64 UNIX, HP 9000 Series HP-UX, Linux Intel, and Sun Solaris</b>
<br />
Part No. A96167-01
</font>
</td>
<td valign="bottom" align="right" width="144">
<table cellspacing="0" cellpadding="0" width="100%">
</tr>
<td align="center" valign="top" width="25%"><a href="toc.htm"><img src="../Support/gifs/conticon.gif" alt="Go To Table Of Contents" border="0" height="30" width="30"><br /><font size="-2">Contents</font></a></td>
<td align="center" valign="top" width="25%"><a href="index.htm"><img src="../Support/gifs/indxicon.gif" alt="Go To Index" border="0" height="30" width="30"><br /><font size="-2">Index</font></a></td>
</tr>
</table>
</td>
</tr>
</table>
<hr />
<p>
<a href="inst.htm">
<img src="../Support/gifs/larrow.gif" alt="Previous" border="0" height="30" width="30"></a>
<a href="appa_prod.htm">
<img src="../Support/gifs/rarrow.gif" alt="Next" border="0" height="30" width="30"></a>
</p>
<a name="BEGIN"></a>
<div class="IND">
<!-- End Header --><a id="CHDEBCCC" name="CHDEBCCC"></a><a id="BHACBJFH" name="BHACBJFH"></a>
<h1>
<font face="arial, helvetica, sans-serif" color="#330099">
4
<br />
<a id="sthref531" name="sthref531"></a>Post-Installation
</font>
</h1>
<p>After completing installation, you must perform certain post-installation steps and configure the Oracle9<em>i</em> database. This chapter describes the required steps as well as some optional ones.
</p>
<ul>
<li type="disc">
<p><a href="#i1005684">Configuration Tasks to Perform as the root User</a>
</p>
</li>
<li type="disc">
<p><a href="#i1000666">Configuration Tasks to Perform as the oracle User</a>
</p>
</li>
<li type="disc">
<p><a href="#i1038636">Post-Installation for Installed Oracle Products </a>
</p>
</li>
<li type="disc">
<p><a href="#i1034862">Additional Oracle Product Installation and Configuration</a>
</p>
</li>
<li type="disc">
<p><a href="#i1033250">Starter Database Contents</a>
</p>
</li>
<li type="disc">
<p><a href="#i1006910">Oracle Software Removal</a>
</p>
<br /><table summary="This is a layout table to format a note" title="This is a layout table to format a note" dir="ltr" border="1" width="80%" frame="hsides" rules="groups" cellpadding="3" cellspacing="0"><tbody>
<tr>
<td align="left" colspan="1" rowspan="1">
<p>
<font face="arial, helvetica, sans-serif">
<strong><strong>Note</strong>:</strong>
</font>
</p>This chapter describes basic configuration only<em>.</em> See the <em>Oracle9<em>i</em> Administrator's Reference Release 2 (9.2.0.1.0) for UNIX Systems</em> and the product administration and tuning guides for more sophisticated configuration and tuning information.
</td>
</tr></tbody>
</table><br />
</li>
</ul><a id="i1005684" name="i1005684"></a>
<div class="sect1">
<!--
infolevel=all
infotype=general
--><a id="sthref532" name="sthref532"></a>
<h2>
<font face="arial, helvetica, sans-serif" color="#330099">Configuration Tasks to Perform as the root User
</font>
</h2>
<p>Log in as the <code>root</code> user and perform the following tasks: <a id="sthref533" name="sthref533"></a>
</p>
<ul>
<li type="square">
<p><a href="#i1037845">Creating Additional UNIX Accounts </a>
</p>
</li>
<li type="square">
<p><a href="#i1012849">Verifying Database File Security </a>
</p>
</li>
<li type="square">
<p><a href="#i1026404">Changing Group Membership of the Apache User</a>
</p>
</li>
<li type="square">
<p><a href="#i1035370">Automating Database Startup and Shutdown for HP, Linux and Solaris (Optional)</a>
</p>
</li>
<li type="square">
<p><a href="#i1035384">Automating Database Startup and Shutdown for AIX (Optional)</a>
</p>
</li>
<li type="square">
<p><a href="#i1037836">Automating Database Startup and Shutdown for Tru64 (Optional)</a>
</p>
</li>
</ul><a id="i1037845" name="i1037845"></a>
<div class="sect2">
<!--
infolevel=all
infotype=general
--><a id="sthref534" name="sthref534"></a>
<h3>
<font face="arial, helvetica, sans-serif" color="#330099">
Creating Additional UNIX Accounts <a id="sthref535" name="sthref535"></a>
</font>
</h3>
<p><a id="sthref536" name="sthref536"></a><a id="sthref537" name="sthref537"></a>If necessary, create additional UNIX accounts. Users must be members of the OSDBA or OSOPER groups to connect to the database with administrator privileges.
</p>
</div class="sect2"><a id="i1012849" name="i1012849"></a>
<div class="sect2">
<!--
infolevel=all
infotype=general
--><a id="sthref538" name="sthref538"></a>
<h3>
<font face="arial, helvetica, sans-serif" color="#330099">
Verifying Database File Security <a id="sthref539" name="sthref539"></a><a id="sthref540" name="sthref540"></a>
</font>
</h3>
<p>If you configure Oracle9<em>i</em> database in a way similar to the United States NCSC C2 or European ITSEC E3 security evaluation configuration, then verify database file security to ensure the integrity of the Oracle software installation. This task is optional if security is not an issue.
</p>
<p>To prevent unauthorized access to secure data, you must protect your files. The file privileges and recommended ownership are as follows:
</p>
<ul>
<li type="disc">
<p>The <code>oracle</code><em> </em>account should have read, write, and execute privileges for all files and directories in the Oracle9<em>i</em> installation.
</p>
</li>
<li type="disc">
<p><a id="sthref541" name="sthref541"></a><a id="sthref542" name="sthref542"></a><a id="sthref543" name="sthref543"></a>The ORAINVENTORY group should have read, write, and execute privileges on the <code>oraInventory</code> directory, but should not have write permissions on anything else.
</p>
</li>
<li type="disc">
<p>No user other than the <code>oracle</code> user or the ORAINVENTORY group should have write access on any files or directories in the Oracle9<em>i</em> installation.
</p>
</li>
</ul>
<p><a id="sthref544" name="sthref544"></a><a id="sthref545" name="sthref545"></a><a href="#g1055563">Table 4-1</a> summarizes the directory and file permissions for different types of files.
</p>
<div align="center">
<br /><table summary="This is a layout table to format a note" title="This is a layout table to format a note" dir="ltr" border="1" width="80%" frame="hsides" rules="groups" cellpadding="3" cellspacing="0"><tbody>
<tr>
<td align="left" colspan="1" rowspan="1">
<p>
<font face="arial, helvetica, sans-serif">
<strong>Note:</strong>
</font>
</p>These permissions are the default values and should not be changed.
</td>
</tr></tbody>
</table><br />
</div><a id="sthref546" name="sthref546"></a><a id="g1055563" name="g1055563"></a>
<p><strong><em><font face="arial, helvetica, sans-serif">Table 4-1 Access Permissions on Oracle Directories and Files
</font></em></strong></p>
<table title="Access Permissions on Oracle Directories and Files " summary="This table summarizes the directory and file permissions for different files." dir="ltr" border="1" width="100%" frame="hsides" rules="rows" cellpadding="3" cellspacing="0">
<thead>
<tr align="left" valign="top">
<th id="r1c1" align="left" colspan="1" rowspan="1" valign="bottom">
<font face="Arial, Helvetica, sans-serif">
<strong>Directories/Files
</strong></font></th>
<th id="r1c2" align="left" colspan="1" rowspan="1" valign="bottom">
<font face="Arial, Helvetica, sans-serif">
<strong><a id="i1026300" name="i1026300"></a>Permissions
</strong></font></th>
<th id="r1c3" align="left" colspan="1" rowspan="1" valign="bottom">
<font face="Arial, Helvetica, sans-serif">
<strong>Comments
</strong></font></th>
</tr>
</thead><tbody>
<tr align="left" valign="top">
<td id="r2c1" headers="r1c1" align="left" colspan="1" rowspan="1">All data files, redo log, and control files (extensions for these files are typically<code>.dbf</code>,<code>.log</code>, and<code>.ctl</code>)
</td>
<td headers="r2c1 r1c2" align="left" colspan="1" rowspan="1">640
<p><code>rw-r----</code>
</p>
</td>
<td headers="r2c1 r1c3" align="left" colspan="1" rowspan="1"> The <code>oracle</code> user and ORAINVENTORY group are the only users that should have read privileges for all data files, redo logs, and control files to maintain discretionary access to data.
</td>
</tr>
<tr align="left" valign="top">
<td id="r3c1" headers="r1c1" align="left" colspan="1" rowspan="1"><code>$ORACLE_HOME/bin/</code>
</td>
<td headers="r3c1 r1c2" align="left" colspan="1" rowspan="1">755
<p><code>rwxr-xr-x</code>
</p>
</td>
<td headers="r3c1 r1c3" align="left" colspan="1" rowspan="1">The <code>oracle</code> user should have read, write and execute privileges and all users should have read and execute privileges to this directory.
</td>
</tr>
<tr align="left" valign="top">
<td id="r4c1" headers="r1c1" align="left" colspan="1" rowspan="1">The <code>oracle</code> executable, and the following executables: <br /><code>$ORACLE_HOME/bin/dbsnmp</code>
<p><code>$ORACLE_HOME/bin/oradism</code>
</p>
</td>
<td headers="r4c1 r1c2" align="left" colspan="1" rowspan="1">6751
<p><code>rws-r-s--x</code>
</p>
<p>
</p>
</td>
<td headers="r4c1 r1c3" align="left" colspan="1" rowspan="1">The 6 sets the <code>setuid</code> bit and the <code>setgid</code> bit so the executables run as the <code>oracle</code> user and <code>OSDBA</code> group, regardless of who executes them.
</td>
</tr>
<tr align="left" valign="top">
<td id="r5c1" headers="r1c1" align="left" colspan="1" rowspan="1">All other executables
</td>
<td headers="r5c1 r1c2" align="left" colspan="1" rowspan="1">755
<p><code>rwxr-xr-x</code>
</p>
</td>
<td headers="r5c1 r1c3" align="left" colspan="1" rowspan="1">The <code>oracle</code> user should have read, write and execute privileges and all users should have read and execute privileges to this directory.
</td>
</tr>
<tr align="left" valign="top">
<td id="r6c1" headers="r1c1" align="left" colspan="1" rowspan="1"><code>$ORACLE_HOME/lib/</code>
</td>
<td headers="r6c1 r1c2" align="left" colspan="1" rowspan="1">755
<p><code>rwxr-xr-x</code>
</p>
</td>
<td headers="r6c1 r1c3" align="left" colspan="1" rowspan="1">The <code>oracle</code> user should have read, write and execute privileges and all other users should have read and execute privileges to this directory.
</td>
</tr>
<tr align="left" valign="top">
<td id="r7c1" headers="r1c1" align="left" colspan="1" rowspan="1">All files under <br /><code>$ORACLE_HOME/lib/</code>
</td>
<td headers="r7c1 r1c2" align="left" colspan="1" rowspan="1">644
<p><code>rw-r--r--</code>
</p>
</td>
<td headers="r7c1 r1c3" align="left" colspan="1" rowspan="1">The <code>oracle</code> user should have read, write and execute privileges and the other users should have read-only privileges to these files.
</td>
</tr>
<tr align="left" valign="top">
<td id="r8c1" headers="r1c1" align="left" colspan="1" rowspan="1"><code>$ORACLE_HOME/rdbms/log</code>
</td>
<td headers="r8c1 r1c2" align="left" colspan="1" rowspan="1">751
<p><code>rwxr-x--x</code>
</p>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -