EM12c : Real-time Monitoring is generating the logs with World-writable Permissions (Doc ID 2256552.1)

Last updated on MAY 09, 2017

Applies to:

Enterprise Manager Base Platform - Version 12.1.0.5.0 to 13.1.0.0.0 [Release 12.1 to 13.1]
Information in this document applies to any platform.

Symptoms

Real-time Monitoring is generating the logs with -rw-rw-rw- permissions which is an audit issue as everyone has the right to change the logs. The logs should have the following rights at least: -rw-rw-r--

$ dcli -g /opt/oracle/.dbs_group -l oracle 'ls -l /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log'
myexadb01: -rw-rw-rw- 1 oracle dba 1891691 Apr 5 09:25 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log
myexadb02: -rw-rw-rw- 1 oracle dba 1886859 Apr 5 09:26 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log
myexadb03: -rw-rw-rw- 1 oracle dba 1891275 Apr 5 09:26 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log
myexadb04: -rw-rw-rw- 1 oracle dba 1868773 Apr 5 09:25 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log
myexadb05: -rw-rw-rw- 1 oracle dba 1891355 Apr 5 09:26 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log

$ ls -l /opt/oracle/product/agent/agent_inst/sysman/log/nmxc*
-rw-rw-rw- 1 root root 0 Mar 24 09:07 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.err
-rw-rw-rw- 1 oracle dba 1892387 Apr 5 09:27 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log
-rw-rw-rw- 1 oracle dba 2097190 Apr 1 14:55 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log.1
-rw-rw-rw- 1 root root 2097245 Mar 28 11:56 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcctl.log.2
-rw-rw-rw- 1 root root 1197 Apr 4 14:28 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcf.log
-rw-rw-rw- 1 root root 1649 Apr 4 14:28 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcf.trc
-rw-rw-rw- 1 root root 2178 Apr 4 14:09 /opt/oracle/product/agent/agent_inst/sysman/log/nmxcf.trc.1



Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms