Using the Default Security Settings

When you create a new database, Oracle Database provides the following default security settings:

• Enables default auditing settings. See "Using Default Auditing for Security-Relevant SQL Statements and Privileges" for detailed information.

• Creates stronger enforcements for new or changed passwords. "Requirements for Creating Passwords" describes the new password requirements.

• Removes the CREATE EXTERNAL JOB privilege from PUBLIC. For greater security, grant the CREATE EXTERNAL JOB privilege only to SYS, database administrators, and those trusted users who need it.

• Sets security-related initialization and profile parameter settings. Table: Default Security Settings for Initialization and Profile Parameters lists the modified parameter settings.

  Default Security Settings for Initialization and Profile Parameters

  Setting	10g Default	11g Default
  AUDIT_TRAIL	NONE	DB
  O7_DICTIONARY_ACCESSIBILITY	FALSE	FALSE
  PASSWORD_GRACE_TIME	UNLIMITED	7
  PASSWORD_LOCK_TIME	UNLIMITED	1
  FAILED_LOGIN_ATTEMPTS	10	10
  PASSWORD_LIFE_TIME	UNLIMITED	180
  PASSWORD_REUSE_MAX	UNLIMITED	UNLIMITED
  PASSWORD_REUSE_TIME	UNLIMITED	UNLIMITED
  REMOTE_OS_ROLES	FALSE	FALSE

  
  

  Note: If your applications use the default password security settings from Oracle Database 10g Release 2 (10.2), then you can revert to these settings until you modify them to use the Release 11g password security settings. To do so, run the undopwd.sql script.

  After you have modified your applications to conform to the Release 11g password security settings, you can manually update your database to use the password security configuration that suits your business needs, or you can run the secconf.sql script to apply the Release 11g default password settings.

  The undopwd.sql and secconf.sql scripts are in the $ORACLE_HOME/rdbms/admin directory. The undopwd.sql script affects password settings only, and the secconf.sql script affects both password and audit settings. They have no effect on other security settings.