HSM: WORM_lite Files Can Be Overwritten (Doc ID 2642106.1)

Last updated on MARCH 02, 2020

Applies to:

Symptoms

Oracle HSM Write Once Read Many (WORM) file systems let you make files read-only and enforce retention for a specified period. The 'lite' implementations let root users shorten retention periods, delete files and directories, and delete volumes using the sammkfs command.  Both standard and emulation modes have both a strict WORM implementation and a less restrictive 'lite' implementation, that relaxes some restrictions for root users.   The lite implementations let root users shorten retention periods, delete files and directories, and delete volumes using the file-system creation command sammkfs. 

However, an issue was found with the lite implementation where worm_lite files can be replaced/deleted/changed by any user and not just the root user.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.