Compiled Messages: ------------------------------------------------------------ Message no. 175 Posted by Eric Knuth (elknuth2) on Tuesday, September 5, 2006 4:25pm Subject: Humor and the DBA Lately, due to Dr. Liu's directive, I have been doing a lot of thinking about merging database security and humor. Talk about one tough subject. I pondered and pondered this subject. I thought about taking existing jokes and adding a DBA to it. A priest, a rabbi, and a DBA walk into a bar .... Just doesn't seem to go anywhere. I tried a variation of a tried and true joke. Q: How many DBA's does it take to replace a light bulb? A: None. It's a triggered process. Still kind of lame. (But pretty good for me) I turned to my old friend Google. http://www.orafaq.com/faqfun.htm Now heres some good stuff. Enjoy Eric ------------------------------------------------------------ Message no. 176 Posted by Lakshmikar Padmaraju (lpadmaraju) on Tuesday, September 5, 2006 4:38pm Subject: Link to submit project2 Hello security worriers, I am trying to submit my project2 assignment, on my webCT it is showing it is not available, did anybody got different result. please let me know. Usually Dr. LIU turns on assignment 1 week before that is why I am worried little bit. Raju. ------------------------------------------------------------ Message no. 177[Branch from no. 176] Posted by Krishnamurth Ashwini (kashwini) on Tuesday, September 5, 2006 4:44pm Subject: Re: Link to submit project2 Yes Raju...Project-2 is not made available for us to submit. Maybe he'll enable it very soon. Ash ------------------------------------------------------------ Message no. 188[Branch from no. 177] Posted by Rhonda Nichols (renichols2) on Wednesday, September 6, 2006 7:09pm Subject: Re: Link to submit project2 Just talked to him---he is enabling as i type.... -Rhonda ------------------------------------------------------------ Message no. 190 Posted by Naziya Shaik (snaziya) on Wednesday, September 6, 2006 11:52pm Subject: Security Tab My OS is Windows XP and I am trying to change the file permissions as shown in the text boook. I mean I am not able to see the security tab (even though i have administrative privileges) to see the permissions for the init.ora file. Is there any other way to see those permissions? ------------------------------------------------------------ Message no. 191[Branch from no. 190] Posted by Daniel Thurston (dsthurston) on Thursday, September 7, 2006 5:35am Subject: Re: Security Tab seems you need to be connected to a domain: from http://support.microsoft.com/kb/308418/ -------------- . . . Permissions for files and folders Permissions for files and folders include Full Control, Modify, Read and Execute, List Folder Contents, Read, and Write. Note This article assumes that you are using Windows XP on a domain. By default, simplified sharing is enabled in Windows XP if you are not connected to a domain. Therefore, the Security tab and the advanced options for permissions are not available. If you are not joined to a domain, or you are running Windows XP Home Edition, and you want to view the Security tab, see the "Set, view, change, or remove file and folder permissions" section. . . . -------------------------------- ------------------------------------------------------------ Message no. 192[Branch from no. 190] Posted by Krishnamurth Ashwini (kashwini) on Thursday, September 7, 2006 8:38am Subject: Re: Security Tab Hey Naziya, I actually did this.... 1. Go to "Control panel" 2. Double click "Folder Options" 3.Click the "View tab" 4. Chech the box that says "Use SImple file sharing (Recommended)" 5. Click Apply 6.Click OK Now you should be able to see the Security tab. Ash ------------------------------------------------------------ Message no. 193[Branch from no. 192] Posted by Krishnamurth Ashwini (kashwini) on Thursday, September 7, 2006 8:46am Subject: Re: Security Tab Correction.... Point 4. UNCHECK the box the says "Use SImple file sharing (Recommended)" Ash ------------------------------------------------------------ Message no. 194[Branch from no. 193] Posted by Daniel Thurston (dsthurston) on Thursday, September 7, 2006 10:20am Subject: Re: Security Tab yeah that did it. It didn't make sense that you could only do it on a domain machine. Cheers Dan ------------------------------------------------------------ Message no. 195[Branch from no. 192] Posted by Kelsey Pooley (kjpooley) on Thursday, September 7, 2006 12:42pm Subject: Re: Security Tab I was having the same problem as Naziya. Thanks Ash! Kelsey ------------------------------------------------------------ Message no. 196[Branch from no. 192] Posted by Lakshmikar Padmaraju (lpadmaraju) on Thursday, September 7, 2006 2:57pm Subject: Re: Security Tab Hi, Microsoft recommends that XP machines which are not on domain should use simple file sharing, because OS will take care of the security. So after you done with with your project it is better to switch back to simple file sharing. Here is Microsoft Documentation related to this, I also giving link if anybody want detail information. ------------------------------------------------------------------ Turning on and turning off Simple File Sharing Simple File Sharing is always turned on in Windows XP Home Edition-based computers. By default, the Simple File Sharing UI is turned on in Windows XP Professional-based computers that are joined to a workgroup. Windows XP Professional-based computers that are joined to a domain use only the classic file sharing and security interface. When you use the Simple File Sharing UI (that is located in the folder's properties), both share and file permissions are configured. If you turn off Simple File Sharing, you have more control over the permissions to individual users. However, you must have advanced knowledge of NTFS and share permissions to help keep your folders and files more secure. If you turn off Simple File Sharing, the Shared Documents feature is not turned off. To turn Simple File Sharing on or off in Windows XP Professional, follow these steps: 1. Double-click My Computer on the desktop. 2. On the Tools menu, click Folder Options. 3. Click the View tab, and then select the Use Simple File Sharing (Recommended) check box to turn on Simple File Sharing. (Clear this check box to turn off this feature.) Link : http://support.microsoft.com/kb/304040/ ------------------------------------------------------------------------------------- Hope this helps Raju. ------------------------------------------------------------ Message no. 197[Branch from no. 193] Posted by Naziya Shaik (snaziya) on Thursday, September 7, 2006 7:01pm Subject: Re: Security Tab I cannot find the "use simple file sharing" in the view tab.. and also when i tried to find the properties of init.ora file it showed tabs like general, version, compatibility and summary. Is anything wrong in my installation..or else am i doing something wrong?? Naz ------------------------------------------------------------ Message no. 198[Branch from no. 196] Posted by Naziya Shaik (snaziya) on Thursday, September 7, 2006 7:31pm Subject: Re: Security Tab I can see security tab only in safe mode. By the way..I could not find "use simple file sharing" in the view tab. I know its weird..but i donot know why.. Naz ------------------------------------------------------------ Message no. 199[Branch from no. 198] Posted by Krishnamurth Ashwini (kashwini) on Thursday, September 7, 2006 7:41pm Subject: Re: Security Tab includes attachment I have attached a file that has some images of Folder Options and the View tab in it...Check if you see the same thing in your computer. Ash ------------------------------------------------------------ Message no. 200[Branch from no. 199] Posted by Daniel Thurston (dsthurston) on Thursday, September 7, 2006 7:56pm Subject: Re: Security Tab good graphic Ash, it is the very bottom check box that should be unchecked dan ------------------------------------------------------------ Message no. 202[Branch from no. 190] Posted by Eric Knuth (elknuth2) on Thursday, September 7, 2006 9:38pm Subject: Re: Security Tab Remember that you must be in the local admin group for most administrative functions to work. You can check this in: >Control Panel (classic) >Administrative Tools >Computer Management Click the "+" on Local Users and Groups In the Groups folder double click the Administrators group. Make sure your login is listed otherwise you will need to login as administrator. Thanks Eric ------------------------------------------------------------ Message no. 203[Branch from no. 199] Posted by Naziya Shaik (snaziya) on Thursday, September 7, 2006 10:00pm Subject: Re: Security Tab well ash, thank you for your detailed explanation, but the thing is i am not able to find that option in it. and also i am logged in as administrator. but it works in safe mode. ------------------------------------------------------------ Message no. 204[Branch from no. 202] Posted by Naziya Shaik (snaziya) on Thursday, September 7, 2006 10:09pm Subject: Re: Security Tab Ash, I am attaching my view tab document....FYI.. what ever i see..i pasted it. Now what do you think I should do. ------------------------------------------------------------ Message no. 205[Branch from no. 202] Posted by Naziya Shaik (snaziya) on Thursday, September 7, 2006 10:11pm Subject: Re: Security Tab Eric, thank you for your suggestion...may be i am being stupid here.. i attached a doc...pasted computer management folder ------------------------------------------------------------ Message no. 206[Branch from no. 205] Posted by Naziya Shaik (snaziya) on Thursday, September 7, 2006 10:12pm Subject: Re: Security Tab includes attachment oops...forgot to attach files.. Eric and Ash..i am attaching them here.. ------------------------------------------------------------ Message no. 207[Branch from no. 206] Posted by Krishnamurth Ashwini (kashwini) on Thursday, September 7, 2006 10:34pm Subject: Re: Security Tab Yeah..I see what you are saying... By the way, Mine is Windows XP-Professional edition- Service Pack2.(under My Computer Help menu>About windows) Do you have the same? Ash ------------------------------------------------------------ Message no. 209 Posted by Sagun Piya (srpiya2) on Friday, September 8, 2006 1:36am Subject: proj3...suggestion hey guys, I am confused about to which file, the permission to be set? Do we have to give full access/control or add any group to the new user? hope to hear from you guys soon Sagun ------------------------------------------------------------ Message no. 210[Branch from no. 206] Posted by Daniel Thurston (dsthurston) on Friday, September 8, 2006 7:37am Subject: Re: Security Tab There is another way to bring up the user manager that Eric mentioned: start -> run type in: lusrmgr.msc hit "OK" that will take you to the same user manager console if your path is correct, otherwise it is in your windows folder ->system32 folder I checked this out in a non-administrator account and you shold still be able to see the same options under folder options. That makes me wonder if you are running the latest service pack and patches. check your patches Cheers DanT ------------------------------------------------------------ Message no. 211[Branch from no. 209] Posted by Krishnamurth Ashwini (kashwini) on Friday, September 8, 2006 7:55am Subject: Re: proj3...suggestion Hi Sagun, I think he is just asking for us to give full control to the user. I am not sure about adding the user to any group. Ash ------------------------------------------------------------ Message no. 212[Branch from no. 211] Posted by Daniel Thurston (dsthurston) on Friday, September 8, 2006 8:02am Subject: Re: proj3...suggestion I agree with Ash; You could create a group and add the proper users to it, then add the proper permissions to the group, but that is more work than required. You would do that if you had more than one or two user that you wanted to give the same permissions to. Cheers Dan ------------------------------------------------------------ Message no. 215 Posted by Sagun Piya (srpiya2) on Friday, September 8, 2006 1:32pm Subject: humor Microsoft vs. GM At a recent computer expo (COMDEX), Bill Gates reportedly compared the computer industry with the auto industry and stated, "If GM had kept up with technology like the computer industry has, we would all be driving twenty-five dollar cars that got 1000 mi/gal." Recently General Motors addressed this comment by releasing the statement, "Yes, but would you want your car to crash twice a day?" And... 1. Every time they repainted the lines on the road you would have to buy a new car. 2. Occasionally your car would die on the freeway for no reason, and you would just accept this, restart and drive on. 3. Occasionally, executing a maneuver would cause your car to stop and fail and you would have to re-install the engine. For some strange reason, you would accept this too. 4. You could only have one person in the car at a time, unless you bought "Car95" or "CarNT". But, then you would have to buy more seats. 5. Macintosh would make a car that was powered by the sun, was reliable, five times as fast, twice as easy to drive, but would only run on five percent of the roads. 6. The Macintosh car owners would get expensive Microsoft upgrades to their cars, which would make their cars run much slower. 7. The oil, gas and alternator warning lights would be replaced by a single "general car default" warning light. 8. New seats would force everyone to have the same size butt. 9. The airbag system would say, "Are you sure?" before going off. Sagun ------------------------------------------------------------ Message no. 220[Branch from no. 207] Posted by Naziya Shaik (snaziya) on Friday, September 8, 2006 3:11pm Subject: Re: Security Tab Mine is WIndows XP Home edition-service pack 2 do you think this will have an effect on..wht i was trying to do? ------------------------------------------------------------ Message no. 221[Branch from no. 220] Posted by Kelsey Pooley (kjpooley) on Friday, September 8, 2006 4:30pm Subject: Re: Security Tab I am running XP Media Center Edition on my desktop, and I was able to uncheck the use simple file sharing to view the security tab, but on my laptop, running XP Home Edition, I couldn't. It's just not there to choose from. ------------------------------------------------------------ Message no. 222[Branch from no. 210] Posted by Naziya Shaik (snaziya) on Friday, September 8, 2006 4:36pm Subject: Re: Security Tab includes attachment Daniel, eric Please have a look at attachment. ------------------------------------------------------------ Message no. 224[Branch from no. 222] Posted by Daniel Thurston (dsthurston) on Friday, September 8, 2006 5:15pm Subject: Re: Security Tab Is it an NTSF partition?? from the origional link I sent... ------------------------------- Troubleshooting If the Security tab is not available, and if you cannot configure permissions for users and groups, either the file or folder that you want to apply permissions to is not an NTFS drive, or simple file sharing is enabled. To troubleshoot, follow these steps: 1. Verify that the file or folder that you want to apply permissions to is an NTFS drive. You can set permissions only on drives that are formatted to use NTFS. 2. By default, simplified sharing is enabled in Windows XP unless you are on a domain. To work around this behavior, disable Simplified Sharing. -------------------------------- Cheers Dan ------------------------------------------------------------ Message no. 225[Branch from no. 224] Posted by Naziya Shaik (snaziya) on Friday, September 8, 2006 6:21pm Subject: Re: Security Tab Finally I got solution for this security tab issue........ In XP Home Edition, the process is slightly different. With this edition of XP, Simple File Sharing cannot be disabled. Assuming that the hard drive has been formatted with NTFS, we can display the Security tab by booting into Safe Mode and logging in with the Administrator account. ------------------------------------------------------------ Message no. 227[Branch from no. 209] Posted by Venkat Munagala (vrmunagala) on Friday, September 8, 2006 10:37pm Subject: Re: proj3...suggestion Hi sagun, By looking at the way project 3 is given I too feel that he is just asking us to create 2 users with respective passwords. Give full access control to it. I don’t think any addition of user to the group. Rohit ------------------------------------------------------------ Message no. 229[Branch from no. 209] Posted by Sagun Piya (srpiya2) on Saturday, September 9, 2006 1:26am Subject: Re: proj3...suggestion thanks for ur suggestion guys. ------------------------------------------------------------ Message no. 233[Branch from no. 190] Posted by Gnaneshwar Bukka (gbukka) on Saturday, September 9, 2006 9:22am Subject: Re: Security Tab Hi Guys, These discussions are getting better always. I am getting to know many things. Thank you all for the information guys. Cheers, Gnaneshwar Bukka. ------------------------------------------------------------ Message no. 234[Branch from no. 233] Posted by Anjana Divakar (adivakar) on Saturday, September 9, 2006 10:13am Subject: Re: Security Tab Hi, I am having the same problems as naziya.All the discussions and solutions are really helpful! thanks! anjana ------------------------------------------------------------ Message no. 235 Posted by Anjana Divakar (adivakar) on Saturday, September 9, 2006 11:10am Subject: project 2 I had a q. According to our third question in the Report section, we have to prove that we are able to change the file attributes. Does that mean we have to invoke and revoke privileges and take screen shots? I thought that we have to give full access to the oracle user. I dint really get what we have to do in the last part. thanks, anjana ------------------------------------------------------------ Message no. 237[Branch from no. 235] Posted by Daniel Thurston (dsthurston) on Saturday, September 9, 2006 1:32pm Subject: Re: project 2 I just took a screen shot where I invoked priv's. I think that if you get to that point you have demonstrated the sufficient knowledge of the question at hand. DanT ------------------------------------------------------------ Message no. 238[Branch from no. 237] Posted by Anjana Divakar (adivakar) on Saturday, September 9, 2006 1:49pm Subject: Re: project 2 Im a little confused...should we execute these commands in sqlplus or the enterprise manager? ------------------------------------------------------------ Message no. 239[Branch from no. 235] Posted by Sagun Piya (srpiya2) on Saturday, September 9, 2006 5:32pm Subject: Re: project 2 yes, we have to give the access for the oracle user by allowing the control to access the oracle. We have to take the screen shot from where we can allow or deny the access for the user. Sagun ------------------------------------------------------------ Message no. 240[Branch from no. 239] Posted by Anjana Divakar (adivakar) on Saturday, September 9, 2006 7:15pm Subject: Re: project 2 Thanks for all your help! ------------------------------------------------------------ Message no. 246[Branch from no. 190] Posted by Venkat Munagala (vrmunagala) on Saturday, September 9, 2006 8:58pm Subject: Re: Security Tab Thanks to all. Even i had few problems, but after going through the discussions I could easily solve the problem. Thanks once again. ------------------------------------------------------------ Message no. 249[Branch from no. 192] Posted by Suresh Methuku (smethuku) on Saturday, September 9, 2006 9:44pm Subject: Re: Security Tab Hi Ash, your tip worked well for me. Thanks a lot. ------------------------------------------------------------ Message no. 250[Branch from no. 227] Posted by Suresh Methuku (smethuku) on Saturday, September 9, 2006 9:53pm Subject: Re: proj3...suggestion Hey rohit, even i think the same. suresh ------------------------------------------------------------ Message no. 251[Branch from no. 227] Posted by Daniel Thurston (dsthurston) on Saturday, September 9, 2006 10:56pm Subject: Re: proj3...suggestion The subject line says project 3 but the question made me think you meant project 2 which is how I answered. Keep in mind that project 2 is strictly a operating system question and project 3 is an oracle question (though you can involve the OS if you choose). The users of oracle do not have to be the same as the users of an operating system(but they could). You could login to your operating system (windows/linux/unix/etc) as user "joe" with one password and then launch sqlplus and login as user "fred" with a different password: if that is how you choose to set it up. So project 2 question refers to user "joe" (the OS user) and project 3 question would refer to the oracle user "fred" (or more exact 2 users: DBSEC and VPD_CLERK1). Hope I didn't confuse the situation any more. Cheers DanT ------------------------------------------------------------