ORA-06520 : LD_LIBRARY_PATH Set In extproc.ora File Is Ignored in ‘ non secure-execution’ mode. (Doc ID 2975091.1)

Last updated on JULY 20, 2024

Applies to:

Symptoms

The SUID/SGID (Set User/Group ID up on execution) is a special type of file permissions given to a file/folder. Normally in Linux/Unix when a program runs, it inherits access permissions from the logged in user.
That is, if you own an executable, and another person issues the executable, then it runs with your permission and not his.

To demonstrate  the issue use sample provided in below document:

External Procedure test with dependent library using the extproc.ora configuration (Doc ID 2361381.1)

and

Executing a Shell by External Procedure Does Not Set PATH Environment Variable When Using extproc.ora File (Doc ID 1528884.1)

A binary is executed in secure-execution mode if the process's real and effective user IDs differ, or the real and effective group IDs differ. For example, the following 'ls' command shows that the owner and group of the executable 'oracle' are ‘oracle’ and ‘orainstall’ and SUID/SGID is set:

Connect database from OS user "oracle" (Owner of Oracle executable) and run sample from (Doc ID 2361381.1).

When running tests as OS user ‘oracle’, executable oracle and extproc are running in secure-execution mode and hence LD_LIBRARY_PATH is preserved.

When running tests as a different OS user which is not ' oracle' (e.g. bugmnt) , executable oracle and extproc are running in non-secure-execution mode and hence LD_LIBRARY_PATH is ignored or not preserved.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.