Securing External Procedures with Oracle Database 12c
The Oracle Database creates the extproc process and runs under the operating system user, that starts the listener or runs an Oracle server process. Quite often, you will see the extproc process running as the oracle user. The extproc process is not physically associated with the Oracle Database.
Oracle Database 12c enables enhanced security for extproc by authenticating it against a user-supplied credential. This new feature allows the creation of a user credential and associates it with the PL/SQL library object. Whenever the application calls an external procedure, the extproc process authenticates the connection before loading the shared library.
The DBMS_CREDENTIAL package allows the configuration of the credential through member subprograms. The CREATE LIBRARY statement has been enhanced for credential specification. A new environment variable, ENFORCE_CREDENTIAL, can be specified in extproc.ora to control the authentication by the...
