IBM Support

STAP process detected running 'su -oracle' using IBM Security Guardium

Question & Answer


Question

Operating system monitoring has detected the STAP process running command 'su -oracle'. Why does this occur?

Answer

This command is run as part of the discovery process. The STAP runs su -oracle as it attempts to discover Oracle databases. This is expect and is working as designed.

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium S-TAP","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"}],"Version":"10.0;10.0.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21992750