Skip to content

Commit 1dd6bcd

Browse files
shakiyamshakiyam
committed
Enhance security documentation to prevent weak password usage
1 parent de3a05e commit 1dd6bcd

File tree

7 files changed

+140
-14
lines changed

7 files changed

+140
-14
lines changed

‎install-Oracle-Database-19c-for-LINUX-ARM/README.md‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,14 +21,32 @@ Download Oracle Database 19c for LINUX ARM software from [Oracle Database Softwa
2121
Configuration
2222
-------------
2323

24-
Copy the file `dotenv.sample` to a new file named `.env` and modify the contents as needed.
24+
**⚠️ IMPORTANT**: Always create a `.env` file before running provision.sh.
25+
Running without `.env` will use weak default passwords from `dotenv.sample`, creating a serious security risk.
2526

27+
Create a secure `.env` file from the sample with proper permissions:
28+
29+
```shell
30+
# Create .env with restricted permissions (owner read/write only)
31+
cp dotenv.sample .env
32+
chmod 600 .env
33+
34+
# Edit the file and set a strong password (DO NOT use default 'oracle')
35+
vi .env
36+
```
37+
38+
**Security Note**: The `.env` file contains sensitive information. Always:
39+
- Set file permissions to `600` (owner read/write only)
40+
- Use strong, unique passwords (avoid default 'oracle')
41+
- Never commit `.env` to version control (already in .gitignore)
42+
43+
Example configuration:
2644
```shell
2745
MEDIA=/mnt
2846
ORACLE_BASE=/u01/app/oracle
2947
ORACLE_CHARACTERSET=AL32UTF8
3048
ORACLE_HOME=/u01/app/oracle/product/19.19.0/dbhome_1
31-
ORACLE_PASSWORD=oracle
49+
ORACLE_PASSWORD=CHANGE_THIS_TO_STRONG_PASSWORD
3250
ORACLE_PDB=pdb1
3351
ORACLE_SAMPLESCHEMA=TRUE
3452
ORACLE_SID=orcl

‎install-OracleDatabase11.2/README.md‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,15 +22,33 @@ Download Oracle Database 11g Release 2 (11.2.0.4) software from [My Oracle Suppo
2222
Configuration
2323
-------------
2424

25-
Copy the file `dotenv.sample` to a new file named `.env` and modify the contents as needed.
25+
**⚠️ IMPORTANT**: Always create a `.env` file before running provision.sh.
26+
Running without `.env` will use weak default passwords from `dotenv.sample`, creating a serious security risk.
2627

28+
Create a secure `.env` file from the sample with proper permissions:
29+
30+
```shell
31+
# Create .env with restricted permissions (owner read/write only)
32+
cp dotenv.sample .env
33+
chmod 600 .env
34+
35+
# Edit the file and set a strong password (DO NOT use default 'oracle')
36+
vi .env
37+
```
38+
39+
**Security Note**: The `.env` file contains sensitive information. Always:
40+
- Set file permissions to `600` (owner read/write only)
41+
- Use strong, unique passwords (avoid default 'oracle')
42+
- Never commit `.env` to version control (already in .gitignore)
43+
44+
Example configuration:
2745
```shell
2846
MEDIA=/mnt
2947
ORACLE_BASE=/u01/app/oracle
3048
ORACLE_CHARACTERSET=AL32UTF8
3149
ORACLE_EDITION=EE
3250
ORACLE_HOME=/u01/app/oracle/product/11.2.0.4/dbhome_1
33-
ORACLE_PASSWORD=oracle
51+
ORACLE_PASSWORD=CHANGE_THIS_TO_STRONG_PASSWORD
3452
ORACLE_SAMPLESCHEMA=TRUE
3553
ORACLE_SID=orcl
3654
```

‎install-OracleDatabase12.1/README.md‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,14 +22,32 @@ Download Oracle Database 12c Release 1 (12.1.0.2) software from [My Oracle Suppo
2222
Configuration
2323
-------------
2424

25-
Copy the file `dotenv.sample` to a new file named `.env` and modify the contents as needed.
25+
**⚠️ IMPORTANT**: Always create a `.env` file before running provision.sh.
26+
Running without `.env` will use weak default passwords from `dotenv.sample`, creating a serious security risk.
2627

28+
Create a secure `.env` file from the sample with proper permissions:
29+
30+
```shell
31+
# Create .env with restricted permissions (owner read/write only)
32+
cp dotenv.sample .env
33+
chmod 600 .env
34+
35+
# Edit the file and set a strong password (DO NOT use default 'oracle')
36+
vi .env
37+
```
38+
39+
**Security Note**: The `.env` file contains sensitive information. Always:
40+
- Set file permissions to `600` (owner read/write only)
41+
- Use strong, unique passwords (avoid default 'oracle')
42+
- Never commit `.env` to version control (already in .gitignore)
43+
44+
Example configuration:
2745
```shell
2846
MEDIA=/mnt
2947
ORACLE_BASE=/u01/app/oracle
3048
ORACLE_CHARACTERSET=AL32UTF8
3149
ORACLE_HOME=/u01/app/oracle/product/12.1.0.2/dbhome_1
32-
ORACLE_PASSWORD=oracle
50+
ORACLE_PASSWORD=CHANGE_THIS_TO_STRONG_PASSWORD
3351
ORACLE_PDB=pdb1
3452
ORACLE_SAMPLESCHEMA=TRUE
3553
ORACLE_SID=orcl

‎install-OracleDatabase12.2/README.md‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,33 @@ Download Oracle Database 12c Release 2 (12.2.0.1) software from [Oracle Software
2121
Configuration
2222
-------------
2323

24-
Copy the file `dotenv.sample` to a new file named `.env` and modify the contents as needed.
24+
**⚠️ IMPORTANT**: Always create a `.env` file before running provision.sh.
25+
Running without `.env` will use weak default passwords from `dotenv.sample`, creating a serious security risk.
2526

27+
Create a secure `.env` file from the sample with proper permissions:
28+
29+
```shell
30+
# Create .env with restricted permissions (owner read/write only)
31+
cp dotenv.sample .env
32+
chmod 600 .env
33+
34+
# Edit the file and set a strong password (DO NOT use default 'oracle')
35+
vi .env
36+
```
37+
38+
**Security Note**: The `.env` file contains sensitive information. Always:
39+
- Set file permissions to `600` (owner read/write only)
40+
- Use strong, unique passwords (avoid default 'oracle')
41+
- Never commit `.env` to version control (already in .gitignore)
42+
43+
Example configuration:
2644
```shell
2745
MEDIA=/mnt
2846
ORACLE_BASE=/u01/app/oracle
2947
ORACLE_CHARACTERSET=AL32UTF8
3048
ORACLE_EDITION=EE
3149
ORACLE_HOME=/u01/app/oracle/product/12.2.0.1/dbhome_1
32-
ORACLE_PASSWORD=oracle
50+
ORACLE_PASSWORD=CHANGE_THIS_TO_STRONG_PASSWORD
3351
ORACLE_PDB=pdb1
3452
ORACLE_SAMPLESCHEMA=TRUE
3553
ORACLE_SID=orcl

‎install-OracleDatabase18/README.md‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,33 @@ Download Oracle Database 18c (18.3) software from [Oracle Software Delivery Clou
2121
Configuration
2222
-------------
2323

24-
Copy the file `dotenv.sample` to a new file named `.env` and modify the contents as needed.
24+
**⚠️ IMPORTANT**: Always create a `.env` file before running provision.sh.
25+
Running without `.env` will use weak default passwords from `dotenv.sample`, creating a serious security risk.
2526

27+
Create a secure `.env` file from the sample with proper permissions:
28+
29+
```shell
30+
# Create .env with restricted permissions (owner read/write only)
31+
cp dotenv.sample .env
32+
chmod 600 .env
33+
34+
# Edit the file and set a strong password (DO NOT use default 'oracle')
35+
vi .env
36+
```
37+
38+
**Security Note**: The `.env` file contains sensitive information. Always:
39+
- Set file permissions to `600` (owner read/write only)
40+
- Use strong, unique passwords (avoid default 'oracle')
41+
- Never commit `.env` to version control (already in .gitignore)
42+
43+
Example configuration:
2644
```shell
2745
MEDIA=/mnt
2846
ORACLE_BASE=/u01/app/oracle
2947
ORACLE_CHARACTERSET=AL32UTF8
3048
ORACLE_EDITION=EE
3149
ORACLE_HOME=/u01/app/oracle/product/18.3.0/dbhome_1
32-
ORACLE_PASSWORD=oracle
50+
ORACLE_PASSWORD=CHANGE_THIS_TO_STRONG_PASSWORD
3351
ORACLE_PDB=pdb1
3452
ORACLE_SAMPLESCHEMA=TRUE
3553
ORACLE_SID=orcl

‎install-OracleDatabase19/README.md‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,33 @@ Download Oracle Database 19c (19.3) software from [Oracle Database Software Down
2121
Configuration
2222
-------------
2323

24-
Copy the file `dotenv.sample` to a new file named `.env` and modify the contents as needed.
24+
**⚠️ IMPORTANT**: Always create a `.env` file before running provision.sh.
25+
Running without `.env` will use weak default passwords from `dotenv.sample`, creating a serious security risk.
2526

27+
Create a secure `.env` file from the sample with proper permissions:
28+
29+
```shell
30+
# Create .env with restricted permissions (owner read/write only)
31+
cp dotenv.sample .env
32+
chmod 600 .env
33+
34+
# Edit the file and set a strong password (DO NOT use default 'oracle')
35+
vi .env
36+
```
37+
38+
**Security Note**: The `.env` file contains sensitive information. Always:
39+
- Set file permissions to `600` (owner read/write only)
40+
- Use strong, unique passwords (avoid default 'oracle')
41+
- Never commit `.env` to version control (already in .gitignore)
42+
43+
Example configuration:
2644
```shell
2745
MEDIA=/mnt
2846
ORACLE_BASE=/u01/app/oracle
2947
ORACLE_CHARACTERSET=AL32UTF8
3048
ORACLE_EDITION=EE
3149
ORACLE_HOME=/u01/app/oracle/product/19.3.0/dbhome_1
32-
ORACLE_PASSWORD=oracle
50+
ORACLE_PASSWORD=CHANGE_THIS_TO_STRONG_PASSWORD
3351
ORACLE_PDB=pdb1
3452
ORACLE_SAMPLESCHEMA=TRUE
3553
ORACLE_SID=orcl

‎install-OracleDatabase21/README.md‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,33 @@ Download Oracle Database 21c (21.3) software from [Oracle Database Software Down
2121
Configuration
2222
-------------
2323

24-
Copy the file `dotenv.sample` to a new file named `.env` and modify the contents as needed.
24+
**⚠️ IMPORTANT**: Always create a `.env` file before running provision.sh.
25+
Running without `.env` will use weak default passwords from `dotenv.sample`, creating a serious security risk.
2526

27+
Create a secure `.env` file from the sample with proper permissions:
28+
29+
```shell
30+
# Create .env with restricted permissions (owner read/write only)
31+
cp dotenv.sample .env
32+
chmod 600 .env
33+
34+
# Edit the file and set a strong password (DO NOT use default 'oracle')
35+
vi .env
36+
```
37+
38+
**Security Note**: The `.env` file contains sensitive information. Always:
39+
- Set file permissions to `600` (owner read/write only)
40+
- Use strong, unique passwords (avoid default 'oracle')
41+
- Never commit `.env` to version control (already in .gitignore)
42+
43+
Example configuration:
2644
```shell
2745
MEDIA=/mnt
2846
ORACLE_BASE=/u01/app/oracle
2947
ORACLE_CHARACTERSET=AL32UTF8
3048
ORACLE_EDITION=EE
3149
ORACLE_HOME=/u01/app/oracle/product/21.3.0/dbhome_1
32-
ORACLE_PASSWORD=oracle
50+
ORACLE_PASSWORD=CHANGE_THIS_TO_STRONG_PASSWORD
3351
ORACLE_PDB=pdb1
3452
ORACLE_SAMPLESCHEMA=TRUE
3553
ORACLE_SID=orcl

0 commit comments

Comments
 (0)