EM12c : Real-time Monitoring is generating the logs with World-writable Permissions
(Doc ID 2256552.1)
Last updated on MARCH 30, 2021
Applies to:
Enterprise Manager Base Platform - Version 12.1.0.5.0 to 13.1.0.0.0 [Release 12.1 to 13c]Information in this document applies to any platform.
Symptoms
Real-time Monitoring is generating the logs with -rw-rw-rw- permissions which is an audit issue as everyone has the right to change the logs. The logs should have the following rights at least: -rw-rw-r--
$ dcli -g <AGENT_INST>/sysman/log/nmxcctl.log'
myexadb01: -rw-rw-rw- 1 oracle dba 1891691 Apr 5 09:25 <AGENT_INST>/sysman/log/nmxcctl.log
myexadb02: -rw-rw-rw- 1 oracle dba 1886859 Apr 5 09:26 <AGENT_INST>/sysman/log/nmxcctl.log
myexadb03: -rw-rw-rw- 1 oracle dba 1891275 Apr 5 09:26 <AGENT_INST>/sysman/log/nmxcctl.log
myexadb04: -rw-rw-rw- 1 oracle dba 1868773 Apr 5 09:25 <AGENT_INST>/sysman/log/nmxcctl.log
myexadb05: -rw-rw-rw- 1 oracle dba 1891355 Apr 5 09:26 <AGENT_INST>/sysman/log/nmxcctl.log
$ ls -l <AGENT_INST>/sysman/log/nmxc*
-rw-rw-rw- 1 root root 0 Mar 24 09:07 <AGENT_INST>/sysman/log/nmxcctl.err
-rw-rw-rw- 1 oracle dba 1892387 Apr 5 09:27 <AGENT_INST>/sysman/log/nmxcctl.log
-rw-rw-rw- 1 oracle dba 2097190 Apr 1 14:55 <AGENT_INST>/sysman/log/nmxcctl.log.1
-rw-rw-rw- 1 root root 2097245 Mar 28 11:56 <AGENT_INST>/sysman/log/nmxcctl.log.2
-rw-rw-rw- 1 root root 1197 Apr 4 14:28 <AGENT_INST>/sysman/log/nmxcf.log
-rw-rw-rw- 1 root root 1649 Apr 4 14:28 <AGENT_INST>/sysman/log/nmxcf.trc
-rw-rw-rw- 1 root root 2178 Apr 4 14:09 <AGENT_INST>/sysman/log/nmxcf.trc.1
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |