Applies to:
Oracle Server - Enterprise Edition - Version: 10.2 to 10.2.0.3
This problem can occur on any platform.
Symptoms
When a user belonging to the dba group but which is not the actual software owner tries to connect to the database as sysdba when the db is stopped, the following message is raised :
ERROR:
ORA-09925: Unable to create audit trail file
SVR4 Error: 13: Permission denied
Additional information: 9925
Permissions on the software binaries are set as required, as checked in $ORACLE_HOME/bin:
$ ls -al oracle*
-rwsr-s--x 1 ora10g dba 118487160 Sep 1 2005 oracle
-rwxr-xr-x 1 ora10g dba 0 Aug 13 2005 oracleO
Cause
The permissions on the adump directory were not set to accept file creation from other users than the software owner. In 10gR2, the adump directory is the new default directory for audit files (instead of $ORACLE_HOME/rdbms/audit). As such, access to this directory is needed in order to connect / as sysdba because these connections are audited by default.
Solution
1. check if the
$ORACLE_BASE/admin/<SID>/adump
directory exists and create it if not
2. change permissions on the directory to 775.
Comments: If you consider this to introduce a security risk then please only stop / start the database as the oracle software owner. Also note that during db startup naturally the audit_dump_dest parameter is not yet initialized so it can only write this specific audit files to the default destination. Also, writing these files is a mandatory requirement for NCSC C2 security evaluation criteria and therefore it cannot be turned off.
Partager