Oracle · Oracle Grid Infrastructure


Under oracle home, some files are owned by root user. They are used by oracle as if they are run by the root login and permissions. oradism is one of them. There are other files like that and this support document is pretty good.

Why are files under $ORACLE_HOME owned by root user? (Doc ID 461144.1)

you can verify if SUID (Set User ID) on the file is set or not just looking at the file permissions. Instead of “rwx”, if you see “rws” ,it means is is set.

what is oradism ?
It is used to set higher execution priorities for some executables such as lms processes for RAC. If it has wrong permission then the processes are run having normal priorities.

On hostnode01 oradism is set to wrong permissions.

[oracle@hostnode01]# ls -l  $ORACLE_HOME/bin/oradism
-rwxr-x--- 1 oracle oinstall 71758 Sep 17  2011 $ORACLE_HOME/bin/oradism
[oracle@hostnode01]$  ps -eo pid,priority,cmd | grep lms 
  9248  -2 asm_lms0_+ASM1
 36204  20 grep lms
113634  20 ora_lms0_DBFSDB1
113638  20 ora_lms1_DBFSDB1
115210  20 ora_lms0_DBTEST1
115214  20 ora_lms1_DBTEST1
115218  20 ora_lms2_DBTEST1
115222  20 ora_lms3_DBTEST1

On hostnode02 oradism is set to correct permissions.

[oracle@hostnode02]#  ls -l  $ORACLE_HOME/bin/oradism
-rwsr-x--- 1 root oinstall 71758 Jul 29  2013 $ORACLE_HOME/bin/oradism
[oracle@hostnode02]$  ps -eo pid,priority,cmd | grep lms 
  9276  -2 asm_lms0_+ASM2
 12348  -2 ora_lms0_DBFSDB2
 12359  -2 ora_lms1_DBFSDB2
 13314  -2 ora_lms0_DBTEST2
 13318  -2 ora_lms1_DBTEST2
 13322  -2 ora_lms2_DBTEST2
 13326  -2 ora_lms3_DBTEST2

Hot to FIX file permissions
you can change the file permission when oracle is running. If you want the fix to be effective, then you need to bounce the instance.

[root@hostnode01]# chmod 4750 $ORACLE_HOME/bin/oradism
[root@hostnode01]# ls -l  $ORACLE_HOME/bin/oradism
-rwsr-x--- 1 oracle oinstall 71758 Sep 17  2011 $ORACLE_HOME/bin/oradism

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s