Securing External Procedures with Oracle Database 12c
The Oracle Database creates the extproc
process and runs under the operating system user, that starts the listener or runs an Oracle server process. Quite often, you will see the extproc
process running as the oracle
user. The extproc
process is not physically associated with the Oracle Database.
Oracle Database 12c enables enhanced security for extproc
by authenticating it against a user-supplied credential. This new feature allows the creation of a user credential and associates it with the PL/SQL library object. Whenever the application calls an external procedure, the extproc
process authenticates the connection before loading the shared library.
The DBMS_CREDENTIAL
package allows the configuration of the credential through member subprograms. The CREATE LIBRARY
statement has been enhanced for credential specification. A new environment variable, ENFORCE_CREDENTIAL
, can be specified in extproc.ora
to control the authentication by the...