Skip to content

Commit d851a3e

Browse files
RendanicRendanic
committed
oradb_manage_db: Remove visible password for sys, system and dbsnmp from dbca responsefile for 12.2+
The plaintext passwords are removed from dbca template. This is limited to RDBMS 12.2 or newer for the moment. IMPORTANT! Please change the passwords for existing database created before this security fix..
1 parent b3946d8 commit d851a3e

File tree

5 files changed

+15
-60
lines changed

5 files changed

+15
-60
lines changed

‎changelogs/fragments/dbca-response.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
---
2+
security_fixes:
3+
- "oradb_manage_db: Remove visible password for sys, system and dbsnmp from dbca responsefile for 12.2+ ()"

‎roles/oradb_manage_db/templates/dbca-create-db.rsp.12.2.0.1.j2‎

Lines changed: 3 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -247,11 +247,7 @@ templateName={{dbca_templatename}}
247247
# Default value : None
248248
# Mandatory : Yes
249249
#-----------------------------------------------------------------------------
250-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name]is defined and dbpasswords[dbh.oracle_db_name]['sys'] is defined %}
251-
sysPassword={{dbpasswords[dbh.oracle_db_name]['sys']}}
252-
{% else %}
253-
sysPassword={{default_dbpass }}
254-
{% endif %}
250+
sysPassword=
255251

256252
#-----------------------------------------------------------------------------
257253
# Name : systemPassword
@@ -261,11 +257,7 @@ sysPassword={{default_dbpass }}
261257
# Default value : None
262258
# Mandatory : Yes
263259
#-----------------------------------------------------------------------------
264-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['system'] is defined %}
265-
systemPassword={{dbpasswords[dbh.oracle_db_name]['system']}}
266-
{% else %}
267-
systemPassword={{default_dbpass }}
268-
{% endif %}
260+
systemPassword=
269261

270262
#-----------------------------------------------------------------------------
271263
# Name : serviceUserPassword
@@ -317,11 +309,7 @@ runCVUChecks=false
317309
# Mandatory : Yes, if emConfiguration is specified or
318310
# the value of runCVUChecks is TRUE
319311
#-----------------------------------------------------------------------------
320-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['dbsnmp'] is defined %}
321-
dbsnmpPassword={{dbpasswords[dbh.oracle_db_name]['dbsnmp']}}
322-
{% else %}
323-
dbsnmpPassword={{default_dbpass }}
324-
{% endif %}
312+
dbsnmpPassword=
325313

326314
#-----------------------------------------------------------------------------
327315
# Name : omsHost

‎roles/oradb_manage_db/templates/dbca-create-db.rsp.18.3.0.0.j2‎

Lines changed: 3 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -247,11 +247,7 @@ templateName={{dbca_templatename}}
247247
# Default value : None
248248
# Mandatory : Yes
249249
#-----------------------------------------------------------------------------
250-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name]is defined and dbpasswords[dbh.oracle_db_name]['sys'] is defined %}
251-
sysPassword={{dbpasswords[dbh.oracle_db_name]['sys']}}
252-
{% else %}
253-
sysPassword={{default_dbpass }}
254-
{% endif %}
250+
# sysPassword=
255251

256252
#-----------------------------------------------------------------------------
257253
# Name : systemPassword
@@ -261,11 +257,7 @@ sysPassword={{default_dbpass }}
261257
# Default value : None
262258
# Mandatory : Yes
263259
#-----------------------------------------------------------------------------
264-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['system'] is defined %}
265-
systemPassword={{dbpasswords[dbh.oracle_db_name]['system']}}
266-
{% else %}
267-
systemPassword={{default_dbpass }}
268-
{% endif %}
260+
# systemPassword=
269261

270262
#-----------------------------------------------------------------------------
271263
# Name : oracleHomeUserPassword
@@ -317,11 +309,7 @@ runCVUChecks=
317309
# Mandatory : Yes, if emConfiguration is specified or
318310
# the value of runCVUChecks is TRUE
319311
#-----------------------------------------------------------------------------
320-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['dbsnmp'] is defined %}
321-
dbsnmpPassword={{dbpasswords[dbh.oracle_db_name]['dbsnmp']}}
322-
{% else %}
323-
dbsnmpPassword={{default_dbpass }}
324-
{% endif %}
312+
dbsnmpPassword=
325313

326314
#-----------------------------------------------------------------------------
327315
# Name : omsHost

‎roles/oradb_manage_db/templates/dbca-create-db.rsp.19.3.0.0.j2‎

Lines changed: 3 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -247,11 +247,7 @@ templateName={{dbca_templatename}}
247247
# Default value : None
248248
# Mandatory : Yes
249249
#-----------------------------------------------------------------------------
250-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name]is defined and dbpasswords[dbh.oracle_db_name]['sys'] is defined %}
251-
sysPassword={{dbpasswords[dbh.oracle_db_name]['sys']}}
252-
{% else %}
253-
sysPassword={{default_dbpass }}
254-
{% endif %}
250+
# sysPassword=
255251

256252
#-----------------------------------------------------------------------------
257253
# Name : systemPassword
@@ -261,11 +257,7 @@ sysPassword={{default_dbpass }}
261257
# Default value : None
262258
# Mandatory : Yes
263259
#-----------------------------------------------------------------------------
264-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['system'] is defined %}
265-
systemPassword={{dbpasswords[dbh.oracle_db_name]['system']}}
266-
{% else %}
267-
systemPassword={{default_dbpass }}
268-
{% endif %}
260+
# systemPassword=
269261

270262
#-----------------------------------------------------------------------------
271263
# Name : oracleHomeUserPassword
@@ -317,11 +309,7 @@ runCVUChecks=
317309
# Mandatory : Yes, if emConfiguration is specified or
318310
# the value of runCVUChecks is TRUE
319311
#-----------------------------------------------------------------------------
320-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['dbsnmp'] is defined %}
321-
dbsnmpPassword={{dbpasswords[dbh.oracle_db_name]['dbsnmp']}}
322-
{% else %}
323-
dbsnmpPassword={{default_dbpass }}
324-
{% endif %}
312+
dbsnmpPassword=
325313

326314
#-----------------------------------------------------------------------------
327315
# Name : omsHost

‎roles/oradb_manage_db/templates/dbca-create-db.rsp.21.3.0.0.j2‎

Lines changed: 3 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -256,11 +256,7 @@ templateName={{dbca_templatename}}
256256
# Default value : None
257257
# Mandatory : Yes
258258
#-----------------------------------------------------------------------------
259-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name]is defined and dbpasswords[dbh.oracle_db_name]['sys'] is defined %}
260-
sysPassword={{dbpasswords[dbh.oracle_db_name]['sys']}}
261-
{% else %}
262-
sysPassword={{default_dbpass }}
263-
{% endif %}
259+
# sysPassword=
264260

265261
#-----------------------------------------------------------------------------
266262
# Name : systemPassword
@@ -270,11 +266,7 @@ sysPassword={{default_dbpass }}
270266
# Default value : None
271267
# Mandatory : Yes
272268
#-----------------------------------------------------------------------------
273-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['system'] is defined %}
274-
systemPassword={{dbpasswords[dbh.oracle_db_name]['system']}}
275-
{% else %}
276-
systemPassword={{default_dbpass }}
277-
{% endif %}
269+
# systemPassword=
278270

279271
#-----------------------------------------------------------------------------
280272
# Name : oracleHomeUserPassword
@@ -326,11 +318,7 @@ runCVUChecks=
326318
# Mandatory : Yes, if emConfiguration is specified or
327319
# the value of runCVUChecks is TRUE
328320
#-----------------------------------------------------------------------------
329-
{% if dbpasswords is defined and dbpasswords[dbh.oracle_db_name] is defined and dbpasswords[dbh.oracle_db_name]['dbsnmp'] is defined %}
330-
dbsnmpPassword={{dbpasswords[dbh.oracle_db_name]['dbsnmp']}}
331-
{% else %}
332-
dbsnmpPassword={{default_dbpass }}
333-
{% endif %}
321+
dbsnmpPassword=
334322

335323
#-----------------------------------------------------------------------------
336324
# Name : omsHost

0 commit comments

Comments
 (0)