Skip to content

Deny oracle db jvm based tools #8909

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 3, 2025
+234 −0
Merged

Deny oracle db jvm based tools #8909

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
7518ef5
Deny Oracle Database JVM based tools
bric3 May 30, 2025
8e7a6e1
Deny Additional Oracle Database JVM based tools
bric3 Jun 2, 2025
ff1ba8e
Updates deny arguments file for Oracle DB JVM based tools
bric3 Jun 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions metadata/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
# SSI injection metadata

## Adding a new deny metadata.

1. Adding or updating denied Java process metadata in order to avoid enabling the tracer is done by editing
the following files :

* `base-requirements.json`
* `denied-arguments.tsv`
* `denied-environment-variables.tsv`

2. Then run the following command to build/update the `requirements.json` file:

```bash
./build-requirements.sh
```
14 changes: 14 additions & 0 deletions metadata/denied-arguments.tsv
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,20 @@ apache_cassandra_sstableupgrade org.apache.cassandra.tools.StandaloneUpgrader
apache_cassandra_sstableutil org.apache.cassandra.tools.StandaloneSSTableUtil Skip Apache Cassandra sstableutil
apache_cassandra_sstableverify org.apache.cassandra.tools.StandaloneVerifier Skip Apache Cassandra sstableverify

# Oracle Database JVM based tools
oracle_dbca oracle.assistants.dbca.driver.DBConfigurator Skip Oracle Database Configuration Assistant
oracle_dbua oracle.assistants.dbua.driver.StartDBUA Skip Oracle Database Upgrade Assistant
oracle_emca oracle.sysman.assistants.emca.sdkimpl.EMConfigAssistant Skip Oracle Enterprise Manager Configuration Assistant
oracle_invctl oracle.install.common.endpoints.cli.CliExecutor Skip Oracle Inventory Control
oracle_netca oracle.net.ca.NetCA Skip Oracle Net Configuration Assistant
oracle_rconfig oracle.sysman.assistants.rconfig.RConfig Skip Oracle RAC Converter
oracle_roohctl oracle.assistants.roohctl.RoohCtl Skip Oracle Read-Only Oracle Home Control
oracle_srvctl oracle.ops.opsctl.OPSCTLDriver Skip Oracle Server Control Utility
oracle_diagsetup oracle.diagfw.adr.diagsetup.DiagSetup Skip Oracle Setup Diagnostic Tool
oracle_ldifmigrator oracle.ldap.util.LDIFMigration Skip Oracle LDIF Migration Tool
oracle_trcasst oracle.net.trcasst.Jtrcasst Skip Oracle Trace Assistant
oracle_trcsess oracle.ss.tools.trcsess.TrcSess Skip Oracle Session Tracer

# Apache Lucene
apache_lucene8_luke org.apache.lucene.luke.app.desktop.LukeMain Skip Lucene 8 Luke
apache_lucene9_luke org.apache.lucene.luke Skip Apache Netbeans
Expand Down
204 changes: 204 additions & 0 deletions metadata/requirements.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -201,6 +201,210 @@
],
"envars": null
},
{
"id": "oracle_dbca",
"description": "Skip Oracle Database Configuration Assistant",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.assistants.dbca.driver.DBConfigurator"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_dbua",
"description": "Skip Oracle Database Upgrade Assistant",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.assistants.dbua.driver.StartDBUA"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_emca",
"description": "Skip Oracle Enterprise Manager Configuration Assistant",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.sysman.assistants.emca.sdkimpl.EMConfigAssistant"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_invctl",
"description": "Skip Oracle Inventory Control",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.install.common.endpoints.cli.CliExecutor"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_netca",
"description": "Skip Oracle Net Configuration Assistant",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.net.ca.NetCA"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_rconfig",
"description": "Skip Oracle RAC Converter",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.sysman.assistants.rconfig.RConfig"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_roohctl",
"description": "Skip Oracle Read-Only Oracle Home Control",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.assistants.roohctl.RoohCtl"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_srvctl",
"description": "Skip Oracle Server Control Utility",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.ops.opsctl.OPSCTLDriver"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_diagsetup",
"description": "Skip Oracle Setup Diagnostic Tool",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.diagfw.adr.diagsetup.DiagSetup"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_ldifmigrator",
"description": "Skip Oracle LDIF Migration Tool",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.ldap.util.LDIFMigration"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_trcasst",
"description": "Skip Oracle Trace Assistant",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.net.trcasst.Jtrcasst"
],
"position": null
}
],
"envars": null
},
{
"id": "oracle_trcsess",
"description": "Skip Oracle Session Tracer",
"os": null,
"cmds": [
"**/java"
],
"args": [
{
"args": [
"oracle.ss.tools.trcsess.TrcSess"
],
"position": null
}
],
"envars": null
},
{
"id": "apache_lucene8_luke",
"description": "Skip Lucene 8 Luke",
Expand Down