Posts

Showing posts from May, 2022

_trace_files_public hidden parameter

The " _trace_files_public" parameter is a hidden parameter whose default value is false and once it's set to true that will allow all users accessing the server where the oracle database is hosted will be able to read the trace files.  Trace files in an oracle database are generated when there is an issue or we have deliberately enabled it to debug some scenario and the oracle process based on version also creates multiple trace files. These files may have some sensitive information and if you want only the owner of your oracle software and users belonging to the same group can only read them we must keep the "_trace_files_public" parameter to its default value false. This is also a CIS recommendation for oracle database security. Since this is a hidden parameter and your query its current setting following X$ tables need to be queried:      select A.ksppinm, B.ksppstvl      from sys.x$ksppi a,sys.x$ksppcv b      where A.indx=B.indx      and A.ksppinm like '