Skip to content

Commit d55b36f

Browse files
bric3bric3
authored
Deny oracle db jvm based tools (#8909)
* Deny Oracle Database JVM based tools APMS-16000
1 parent 5810407 commit d55b36f

File tree

3 files changed

+234
-0
lines changed

3 files changed

+234
-0
lines changed

‎metadata/README.md‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# SSI injection metadata
2+
3+
## Adding a new deny metadata.
4+
5+
1. Adding or updating denied Java process metadata in order to avoid enabling the tracer is done by editing
6+
the following files :
7+
8+
* `base-requirements.json`
9+
* `denied-arguments.tsv`
10+
* `denied-environment-variables.tsv`
11+
12+
2. Then run the following command to build/update the `requirements.json` file:
13+
14+
```bash
15+
./build-requirements.sh
16+
```

‎metadata/denied-arguments.tsv‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,20 @@ apache_cassandra_sstableupgrade org.apache.cassandra.tools.StandaloneUpgrader
1414
apache_cassandra_sstableutil org.apache.cassandra.tools.StandaloneSSTableUtil Skip Apache Cassandra sstableutil
1515
apache_cassandra_sstableverify org.apache.cassandra.tools.StandaloneVerifier Skip Apache Cassandra sstableverify
1616

17+
# Oracle Database JVM based tools
18+
oracle_dbca oracle.assistants.dbca.driver.DBConfigurator Skip Oracle Database Configuration Assistant
19+
oracle_dbua oracle.assistants.dbua.driver.StartDBUA Skip Oracle Database Upgrade Assistant
20+
oracle_emca oracle.sysman.assistants.emca.sdkimpl.EMConfigAssistant Skip Oracle Enterprise Manager Configuration Assistant
21+
oracle_invctl oracle.install.common.endpoints.cli.CliExecutor Skip Oracle Inventory Control
22+
oracle_netca oracle.net.ca.NetCA Skip Oracle Net Configuration Assistant
23+
oracle_rconfig oracle.sysman.assistants.rconfig.RConfig Skip Oracle RAC Converter
24+
oracle_roohctl oracle.assistants.roohctl.RoohCtl Skip Oracle Read-Only Oracle Home Control
25+
oracle_srvctl oracle.ops.opsctl.OPSCTLDriver Skip Oracle Server Control Utility
26+
oracle_diagsetup oracle.diagfw.adr.diagsetup.DiagSetup Skip Oracle Setup Diagnostic Tool
27+
oracle_ldifmigrator oracle.ldap.util.LDIFMigration Skip Oracle LDIF Migration Tool
28+
oracle_trcasst oracle.net.trcasst.Jtrcasst Skip Oracle Trace Assistant
29+
oracle_trcsess oracle.ss.tools.trcsess.TrcSess Skip Oracle Session Tracer
30+
1731
# Apache Lucene
1832
apache_lucene8_luke org.apache.lucene.luke.app.desktop.LukeMain Skip Lucene 8 Luke
1933
apache_lucene9_luke org.apache.lucene.luke Skip Apache Netbeans

‎metadata/requirements.json‎

Lines changed: 204 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -201,6 +201,210 @@
201201
],
202202
"envars": null
203203
},
204+
{
205+
"id": "oracle_dbca",
206+
"description": "Skip Oracle Database Configuration Assistant",
207+
"os": null,
208+
"cmds": [
209+
"**/java"
210+
],
211+
"args": [
212+
{
213+
"args": [
214+
"oracle.assistants.dbca.driver.DBConfigurator"
215+
],
216+
"position": null
217+
}
218+
],
219+
"envars": null
220+
},
221+
{
222+
"id": "oracle_dbua",
223+
"description": "Skip Oracle Database Upgrade Assistant",
224+
"os": null,
225+
"cmds": [
226+
"**/java"
227+
],
228+
"args": [
229+
{
230+
"args": [
231+
"oracle.assistants.dbua.driver.StartDBUA"
232+
],
233+
"position": null
234+
}
235+
],
236+
"envars": null
237+
},
238+
{
239+
"id": "oracle_emca",
240+
"description": "Skip Oracle Enterprise Manager Configuration Assistant",
241+
"os": null,
242+
"cmds": [
243+
"**/java"
244+
],
245+
"args": [
246+
{
247+
"args": [
248+
"oracle.sysman.assistants.emca.sdkimpl.EMConfigAssistant"
249+
],
250+
"position": null
251+
}
252+
],
253+
"envars": null
254+
},
255+
{
256+
"id": "oracle_invctl",
257+
"description": "Skip Oracle Inventory Control",
258+
"os": null,
259+
"cmds": [
260+
"**/java"
261+
],
262+
"args": [
263+
{
264+
"args": [
265+
"oracle.install.common.endpoints.cli.CliExecutor"
266+
],
267+
"position": null
268+
}
269+
],
270+
"envars": null
271+
},
272+
{
273+
"id": "oracle_netca",
274+
"description": "Skip Oracle Net Configuration Assistant",
275+
"os": null,
276+
"cmds": [
277+
"**/java"
278+
],
279+
"args": [
280+
{
281+
"args": [
282+
"oracle.net.ca.NetCA"
283+
],
284+
"position": null
285+
}
286+
],
287+
"envars": null
288+
},
289+
{
290+
"id": "oracle_rconfig",
291+
"description": "Skip Oracle RAC Converter",
292+
"os": null,
293+
"cmds": [
294+
"**/java"
295+
],
296+
"args": [
297+
{
298+
"args": [
299+
"oracle.sysman.assistants.rconfig.RConfig"
300+
],
301+
"position": null
302+
}
303+
],
304+
"envars": null
305+
},
306+
{
307+
"id": "oracle_roohctl",
308+
"description": "Skip Oracle Read-Only Oracle Home Control",
309+
"os": null,
310+
"cmds": [
311+
"**/java"
312+
],
313+
"args": [
314+
{
315+
"args": [
316+
"oracle.assistants.roohctl.RoohCtl"
317+
],
318+
"position": null
319+
}
320+
],
321+
"envars": null
322+
},
323+
{
324+
"id": "oracle_srvctl",
325+
"description": "Skip Oracle Server Control Utility",
326+
"os": null,
327+
"cmds": [
328+
"**/java"
329+
],
330+
"args": [
331+
{
332+
"args": [
333+
"oracle.ops.opsctl.OPSCTLDriver"
334+
],
335+
"position": null
336+
}
337+
],
338+
"envars": null
339+
},
340+
{
341+
"id": "oracle_diagsetup",
342+
"description": "Skip Oracle Setup Diagnostic Tool",
343+
"os": null,
344+
"cmds": [
345+
"**/java"
346+
],
347+
"args": [
348+
{
349+
"args": [
350+
"oracle.diagfw.adr.diagsetup.DiagSetup"
351+
],
352+
"position": null
353+
}
354+
],
355+
"envars": null
356+
},
357+
{
358+
"id": "oracle_ldifmigrator",
359+
"description": "Skip Oracle LDIF Migration Tool",
360+
"os": null,
361+
"cmds": [
362+
"**/java"
363+
],
364+
"args": [
365+
{
366+
"args": [
367+
"oracle.ldap.util.LDIFMigration"
368+
],
369+
"position": null
370+
}
371+
],
372+
"envars": null
373+
},
374+
{
375+
"id": "oracle_trcasst",
376+
"description": "Skip Oracle Trace Assistant",
377+
"os": null,
378+
"cmds": [
379+
"**/java"
380+
],
381+
"args": [
382+
{
383+
"args": [
384+
"oracle.net.trcasst.Jtrcasst"
385+
],
386+
"position": null
387+
}
388+
],
389+
"envars": null
390+
},
391+
{
392+
"id": "oracle_trcsess",
393+
"description": "Skip Oracle Session Tracer",
394+
"os": null,
395+
"cmds": [
396+
"**/java"
397+
],
398+
"args": [
399+
{
400+
"args": [
401+
"oracle.ss.tools.trcsess.TrcSess"
402+
],
403+
"position": null
404+
}
405+
],
406+
"envars": null
407+
},
204408
{
205409
"id": "apache_lucene8_luke",
206410
"description": "Skip Lucene 8 Luke",

0 commit comments

Comments
 (0)