Question: I am
facing issues with the Oracle SGA file permissions in Oracle
12102 on AIX. I want to give a user which is not an Oracle
user the read permissions for the Oracle shared memory.
I found the parameter ALLOW_GROUP_ACCESS_TO_SGA
and set it True but even after doing that the Group in which
the Oracle user and my User are, does not have read
permissions for the SGA files. These are the results of the
ipcs -m command ->
m
428867627 0x37009593 --rw------- user1dba
m 832569392
0xffffffff D-rw------- user1 dba
Do I need to
do anything special other than setting the parameter
ALLOW_GROUP_ACCESS_TO_SGA=TRUE to provide the group read
permissions ?
Answer: The
allow_group_access_to_sga is a Boolean (default FALSE), that
allows read access for SGA to users of Oracle owner group (dba
group).
The OS user is independent from the Oracle parameter
ALLOW_GROUP_ACCESS_TO_SGA.
You need to use a user ID that
belongs to the dba group (from /etc/groups).
The allow_group_access_to_sga only an effect if you try
to access the SGA from the OS level, for example, when you
are attaching to the shared memory segment.
In the
pre 12c behavior an OS user being in the same group can
attach and read from the SGA. With the new 12c release 1,
“600” protection only the OWNER can attach to it – and read
out the SGA.
This is the standard behavior in Oracle
Database 12.2.0.1 and onward.
SQL>
show parameter allow_group
NAME
TYPE VALUE
------------------------------------ -----------
------------------------------
allow_group_access_to_sga
boolean FALSE
|
|
|
|
|
Oracle Training from Don Burleson
The best on site
"Oracle
training classes" are just a phone call away! You can get personalized Oracle training by Donald Burleson, right at your shop!
|
|
|
|
| |
|
Burleson is the American Team
Note:
This Oracle
documentation was created as a support and Oracle training reference for use by our
DBA performance tuning consulting professionals.
Feel free to ask questions on our
Oracle forum.
Verify
experience!
Anyone
considering using the services of an Oracle support expert should
independently investigate their credentials and experience, and not rely on
advertisements and self-proclaimed expertise. All legitimate Oracle experts
publish
their Oracle
qualifications.
Errata?
Oracle technology is changing and we
strive to update our BC Oracle support information. If you find an error
or have a suggestion for improving our content, we would appreciate your
feedback. Just
e-mail:
 and include the URL for the page.
Copyright © 1996 - 2020
All rights reserved by
Burleson
Oracle ®
is the registered trademark of Oracle Corporation.
|
|
