Run
odacli command -h
or
odacliadm command -h
to see detailed help about a
specific command. For example, to see detailed help for the
odacli describe-
dbhome
command, use the following:
odacli describe-dbhome -h
Managing ODACLI Privileges and Security with SUDO
Oracle Appliance Manager command-line utility requires
root
system privileges for
most administration actions. You may want to use SUDO as part of your system
auditing and security policy.
For most tasks, Oracle recommends that you log in as
root
to use the Oracle
Appliance Manager command-line interface on Oracle Database Appliance. If you are
not logged in as
root
, then you cannot carry out most actions on the appliance. For
example, if you are not logged in as
root
, then you can view storage information, but
you cannot modify the storage.
Allowing Root User Access Using SUDO
In environments where system administration is handled by a different group than
database administration, or where security is a significant concern, you may want to
limit access to the
root
user account and password. SUDO enables system
administrators to grant certain users (or groups of users) the ability to run commands
as
root
, while logging all commands and arguments as part of your security and
compliance protocol.
A SUDO security policy is configured by using the file
/etc/sudoers
. Within the
sudoers
file, you can configure groups of users and sets of commands to simplify and
audit server administration with SUDO commands.
Caution:
Configuring SUDO to allow a user to perform any operation is equivalent to
giving that user
root
privileges. Consider carefully if this is appropriate for
your security needs.
See Also:
The SUDO man pages for more information about configuring and using
SUDO:
Chapter 13
Managing ODACLI Privileges and Security with SUDO
13-5
Содержание Database Appliance X6-2-HA
Страница 15: ...Index xv...
