Oracle Network Physical Security Tips

Did you know that with a laptop and a console cable you can change a Cisco router password in about 15 seconds?  Oracle security begins in the machine room.

Many Oracle DBAs forget that  physical security is extremely important! For example, if a hacker can get console access to a RedHat system, they can change the root password in the time it takes to reboot the system.

Most Oracle DBAs take these steps on all their RedHat Linux systems to physically secure them:

• Case security - On rack-mount systems, get the cases where the power/reset buttons are behind a locked window. Be sure to lock the back of your case cabinet so no one can pull a power plug. 

• BIOS security - Set the BIOS to boot off the hard drive first, and then password-protect the BIOS so this can't be changed.
   

• GRUB password - Set a password on grub so the system will boot without a password, but will ask for a password if you attempt to perform any boot time modifications.

Remember, the best network security is moot if I can get to your system, shut it off, open it up and steal the hard drive.