G-7510

🆓

Error

Always prefix Oracle supplied packages with owner schema name.

Rule Details

Severity Level: Blocker
Quality Area: Security
Fixing times: 1 mins
Local-easy
Database Support: OracleDB (v7.3.4 +)

Reason

The signature of Oracle supplied packages is well known and therefore it is quite easy to provide packages with the same name as those from Oracle doing something completely different without you noticing it.

Example

Non-Compliant Example

declare
   co_hello_world constant string(30 char) := 'Hello World';
begin
   dbms_output.put_line(co_hello_world);
end;
/

Issues

Line	Column	Message
4	4	Prefix Oracle supplied package dbms_output with owner schema name.

Compliant Solution - ★★★★★

declare
   co_hello_world constant string(30 char) := 'Hello World';
begin
   sys.dbms_output.put_line(co_hello_world);
end;
/

Parameters

Use parameters to customize the rule to your needs.

Parameter	Description	Default Value
OracleMaintainedPackages	Comma separated list of Oracle maintained packages with public synonyms in Oracle Database 23ai Version 23.7.0.25.02. The packages are prefixed with its owner.	audsys.dbms_audit_mgmt, ctxsys.ctx_anl, ctxsys.ctx_cls, ctxsys.ctx_ddl, ctxsys.ctx_doc, ctxsys.ctx_entity, ctxsys.ctx_output, ctxsys.ctx_query, ctxsys.ctx_report, ctxsys.ctx_thes, ctxsys.ctx_ulexer, ctxsys.dbms_hybrid_vector, ctxsys.dbms_search, ctxsys.dbms_vector_chain, ctxsys.drvodm, dvsys.dbms_macadm, dvsys.dbms_macols_session, dvsys.dbms_macsec_roles, dvsys.dbms_macutl, gsmadmin_internal.dbms_sharding_directory, lbacsys.lbac_policy_admin, lbacsys.lbac_session, lbacsys.lbac_utl, lbacsys.sa_audit_admin, lbacsys.sa_components, lbacsys.sa_label_admin, lbacsys.sa_session, lbacsys.sa_sysdba, lbacsys.sa_user_admin, lbacsys.sa_utl, lbacsys.to_label_list, mdsys.md, mdsys.md_lrs, mdsys.opg_apis, mdsys.opg_graphop, mdsys.opg_metrics, mdsys.opg_path, mdsys.opg_rank, mdsys.prvt_sam, mdsys.sdo, mdsys.sdo_3gl, mdsys.sdo_admin, mdsys.sdo_aggr, mdsys.sdo_catalog, mdsys.sdo_cs, mdsys.sdo_csw, mdsys.sdo_gcdr, mdsys.sdo_geom, mdsys.sdo_geor, mdsys.sdo_geor_admin, mdsys.sdo_geor_aggr, mdsys.sdo_geor_aux, mdsys.sdo_geor_gdal, mdsys.sdo_geor_ip, mdsys.sdo_geor_ra, mdsys.sdo_geor_utl, mdsys.sdo_lrs, mdsys.sdo_migrate, mdsys.sdo_ndm_traffic, mdsys.sdo_net, mdsys.sdo_net_mem, mdsys.sdo_net_partition, mdsys.sdo_nfe, mdsys.sdo_obj_tracing, mdsys.sdo_ols, mdsys.sdo_pc_pkg, mdsys.sdo_pridx, mdsys.sdo_rdf, mdsys.sdo_rdf_internal, mdsys.sdo_router_partition, mdsys.sdo_router_timezone, mdsys.sdo_rtree_admin, mdsys.sdo_sam, mdsys.sdo_sem_downgrade, mdsys.sdo_sem_downgrade_utl, mdsys.sdo_sem_inference, mdsys.sdo_sem_validate, mdsys.sdo_tin_pkg, mdsys.sdo_topo, mdsys.sdo_topo_map, mdsys.sdo_trkr, mdsys.sdo_tune, mdsys.sdo_util, mdsys.sdo_wcs, mdsys.sdo_wfs_lock, mdsys.sdo_wfs_process, mdsys.sem_ols, mdsys.sem_rdfctx, mdsys.sem_rdfsa, mdsys.sem_upgrade_to_11, ords_metadata.oauth, ords_metadata.oauth_admin, ords_metadata.ords, ords_metadata.ords_admin, ords_metadata.ords_apex_repair, ords_metadata.ords_constants, ords_metadata.ords_export, ords_metadata.ords_http_write, ords_metadata.ords_migrate, ords_metadata.ords_oper, ords_metadata.ords_sdw_mle_js, ords_metadata.ords_sdw_scheduler, ords_metadata.ords_sdw_sched_jobs, ords_metadata.ords_sdw_sched_rprt, ords_metadata.ords_security, ords_metadata.ords_security_admin, ords_metadata.ords_services, ords_metadata.ords_types, ords_metadata.ords_util, ords_metadata.osddm_dbms_md_ddl, sys.cs_resource_manager, sys.dbmshsxp, sys.dbmszexp_syspkggrnt, sys.dbms_activity, sys.dbms_adat_report, sys.dbms_adbtask_admin, sys.dbms_addm, sys.dbms_adr, sys.dbms_adr_app, sys.dbms_advisor, sys.dbms_alert, sys.dbms_application, sys.dbms_application_info, sys.dbms_apply_adm, sys.dbms_apply_position, sys.dbms_app_cont, sys.dbms_app_cont_admin, sys.dbms_app_cont_prvt, sys.dbms_app_cont_report, sys.dbms_aq, sys.dbms_aqadm, sys.dbms_aqadm_syscalls, sys.dbms_aqadm_var, sys.dbms_aqelm, sys.dbms_aqin, sys.dbms_aqjms, sys.dbms_aqjms_internal, sys.dbms_aqmigtool, sys.dbms_aqmigtool_sys, sys.dbms_aq_exp_cmt_time_tables, sys.dbms_aq_exp_dequeuelog_tables, sys.dbms_aq_exp_history_tables, sys.dbms_aq_exp_index_tables, sys.dbms_aq_exp_queues, sys.dbms_aq_exp_queue_tables, sys.dbms_aq_exp_signature_tables, sys.dbms_aq_exp_subscriber_tables, sys.dbms_aq_exp_timemgr_tables, sys.dbms_aq_exp_zecurity, sys.dbms_aq_imp_internal, sys.dbms_aq_imp_zecurity, sys.dbms_aq_sys_exp_actions, sys.dbms_aq_sys_exp_internal, sys.dbms_aq_sys_imp_internal, sys.dbms_ash, sys.dbms_ash_internal, sys.dbms_assert, sys.dbms_audit_util, sys.dbms_autoim, sys.dbms_auto_clustering, sys.dbms_auto_index, sys.dbms_auto_partition, sys.dbms_auto_report, sys.dbms_auto_sqlset, sys.dbms_auto_sqltune, sys.dbms_auto_task, sys.dbms_auto_task_admin, sys.dbms_auto_task_export, sys.dbms_auto_task_immediate, sys.dbms_auto_zonemap, sys.dbms_avtune, sys.dbms_aw, sys.dbms_awrapp, sys.dbms_awrapp_admin, sys.dbms_awrhub, sys.dbms_awrhub_server, sys.dbms_awrhub_source, sys.dbms_awr_analytics, sys.dbms_awr_warehouse_server, sys.dbms_awr_warehouse_source, sys.dbms_aw_exp, sys.dbms_aw_stats, sys.dbms_bdsql, sys.dbms_blockchain_table, sys.dbms_blockchain_utl, sys.dbms_cacheutil, sys.dbms_capture_adm, sys.dbms_capture_switch_adm, sys.dbms_change_notification, sys.dbms_comparison, sys.dbms_compression, sys.dbms_credential, sys.dbms_crypto, sys.dbms_cube_log, sys.dbms_datapump, sys.dbms_data_guard, sys.dbms_data_mining, sys.dbms_data_mining_transform, sys.dbms_dbfs_content, sys.dbms_dbfs_content_admin, sys.dbms_dbfs_hs, sys.dbms_dbfs_sfs, sys.dbms_dbfs_sfs_admin, sys.dbms_db_version, sys.dbms_ddl, sys.dbms_ddl_internal, sys.dbms_debug, sys.dbms_debug_jdwp, sys.dbms_debug_jdwp_custom, sys.dbms_describe, sys.dbms_developer, sys.dbms_dg, sys.dbms_dictionary_check, sys.dbms_dimension, sys.dbms_distributed_trust_admin, sys.dbms_dlm, sys.dbms_dm_model_imp, sys.dbms_dnfs, sys.dbms_dst, sys.dbms_editions_utilities, sys.dbms_errlog, sys.dbms_fbt, sys.dbms_feature_usage_report, sys.dbms_fga, sys.dbms_file_transfer, sys.dbms_flashback, sys.dbms_flashback_archive, sys.dbms_frequent_itemset, sys.dbms_fs, sys.dbms_fuse, sys.dbms_fuse_public, sys.dbms_goldengate_adm, sys.dbms_goldengate_auth, sys.dbms_hadoop, sys.dbms_hash, sys.dbms_heat_map, sys.dbms_hierarchy, sys.dbms_hm, sys.dbms_hprof, sys.dbms_hs, sys.dbms_ilm, sys.dbms_ilm_admin, sys.dbms_immutable_table, sys.dbms_index_utl, sys.dbms_inmemory, sys.dbms_inmemory_admin, sys.dbms_inmemory_advise, sys.dbms_irefstats, sys.dbms_java_dump, sys.dbms_java_test, sys.dbms_job, sys.dbms_json_duality, sys.dbms_json_schema, sys.dbms_kafka, sys.dbms_kafka_adm, sys.dbms_lcr, sys.dbms_ldap, sys.dbms_ldap_utl, sys.dbms_lob, sys.dbms_lobutil, sys.dbms_lob_am_private, sys.dbms_lock, sys.dbms_log, sys.dbms_logmnr, sys.dbms_logmnr_d, sys.dbms_logstdby, sys.dbms_logstdby_context, sys.dbms_maintplan, sys.dbms_management_bootstrap, sys.dbms_management_diagnostics, sys.dbms_max_string_size, sys.dbms_mdx_odbo, sys.dbms_mdx_util, sys.dbms_memoptimize, sys.dbms_memoptimize_admin, sys.dbms_metadata, sys.dbms_metadata_build, sys.dbms_metadata_diff, sys.dbms_metadata_dpbuild, sys.dbms_mle, sys.dbms_monitor, sys.dbms_mview_stats, sys.dbms_network_acl_admin, sys.dbms_network_acl_utility, sys.dbms_notifications, sys.dbms_objects_utils, sys.dbms_odci, sys.dbms_output, sys.dbms_parallel_execute, sys.dbms_part, sys.dbms_pclxutil, sys.dbms_pdb, sys.dbms_pdb_alter_sharing, sys.dbms_pdb_app_con, sys.dbms_perf, sys.dbms_pickler, sys.dbms_pipe, sys.dbms_plsql_code_coverage, sys.dbms_pqdiag, sys.dbms_predictive_analytics, sys.dbms_preprocessor, sys.dbms_privilege_capture, sys.dbms_priv_capture, sys.dbms_profiler, sys.dbms_propagation_adm, sys.dbms_psp, sys.dbms_pswmg_import, sys.dbms_random, sys.dbms_rat_mask, sys.dbms_redact, sys.dbms_redactor, sys.dbms_redefinition, sys.dbms_refresh, sys.dbms_registry, sys.dbms_repcat, sys.dbms_repcat_mig, sys.dbms_replayhub, sys.dbms_report, sys.dbms_reputil, sys.dbms_resource_manager, sys.dbms_resource_manager_privs, sys.dbms_result_cache, sys.dbms_result_cache_api, sys.dbms_resumable, sys.dbms_rls, sys.dbms_rmgr_group_export, sys.dbms_rmgr_pact_export, sys.dbms_rmgr_plan_export, sys.dbms_rmin, sys.dbms_rmin_sys, sys.dbms_rolling, sys.dbms_router_admin, sys.dbms_rowid, sys.dbms_row_change_tracking, sys.dbms_rule, sys.dbms_ruleadm_internal, sys.dbms_rule_adm, sys.dbms_rule_exp_ec_internal, sys.dbms_rule_exp_ev_ctxs, sys.dbms_rule_exp_rl_internal, sys.dbms_rule_exp_rs_internal, sys.dbms_rule_exp_rules, sys.dbms_rule_exp_rule_sets, sys.dbms_rule_imp_obj, sys.dbms_rule_internal, sys.dbms_saga, sys.dbms_saga_adm, sys.dbms_scheduler, sys.dbms_sched_argument_import, sys.dbms_sched_attribute_export, sys.dbms_sched_chain_export, sys.dbms_sched_class_export, sys.dbms_sched_constraint_export, sys.dbms_sched_credential_export, sys.dbms_sched_export_callouts, sys.dbms_sched_file_watcher_export, sys.dbms_sched_job_export, sys.dbms_sched_program_export, sys.dbms_sched_schedule_export, sys.dbms_sched_window_export, sys.dbms_sched_wingrp_export, sys.dbms_scn, sys.dbms_sensitive_data, sys.dbms_server_alert, sys.dbms_server_alert_export, sys.dbms_service, sys.dbms_service_const, sys.dbms_service_err, sys.dbms_service_prvt, sys.dbms_session, sys.dbms_shared_capture_adm, sys.dbms_shared_pool, sys.dbms_snapshot, sys.dbms_soda, sys.dbms_space, sys.dbms_space_admin, sys.dbms_space_alert, sys.dbms_spd, sys.dbms_spm, sys.dbms_sql, sys.dbms_sqldiag, sys.dbms_sqlhash, sys.dbms_sqlhist, sys.dbms_sqlpa, sys.dbms_sqlpatch, sys.dbms_sqlq, sys.dbms_sqlset, sys.dbms_sqltune, sys.dbms_sql_firewall, sys.dbms_sql_monitor, sys.dbms_sql_translator, sys.dbms_standard, sys.dbms_stats, sys.dbms_stats_advisor, sys.dbms_stats_internal_agg, sys.dbms_stat_funcs, sys.dbms_stat_funcs_aux, sys.dbms_storage_map, sys.dbms_streams, sys.dbms_streams_adm, sys.dbms_streams_adm_ivk, sys.dbms_streams_auth, sys.dbms_streams_lcr_int, sys.dbms_streams_rpc, sys.dbms_streams_tablespace_adm, sys.dbms_summary, sys.dbms_sum_rweq_export, sys.dbms_sum_rweq_export_internal, sys.dbms_sync_refresh, sys.dbms_sys_mle, sys.dbms_table_data, sys.dbms_table_func, sys.dbms_table_func_admin, sys.dbms_tde_toolkit, sys.dbms_teqk, sys.dbms_tf, sys.dbms_tg_dbg, sys.dbms_tns, sys.dbms_trace, sys.dbms_transaction, sys.dbms_transaction_internal_sys, sys.dbms_transform, sys.dbms_transform_eximp, sys.dbms_tsdp_manage, sys.dbms_tsdp_protect, sys.dbms_types, sys.dbms_type_utility, sys.dbms_umf, sys.dbms_undo_adv, sys.dbms_userdiag, sys.dbms_user_certs, sys.dbms_utility, sys.dbms_vector, sys.dbms_warning, sys.dbms_wlm, sys.dbms_workload_capture, sys.dbms_workload_replay, sys.dbms_workload_repository, sys.dbms_xa, sys.dbms_xds, sys.dbms_xmlgen, sys.dbms_xmlschema_util, sys.dbms_xmlstore, sys.dbms_xplan, sys.dbms_xstream_adm, sys.dbms_xstream_auth, sys.dbms_xstream_auth_ivk, sys.dbms_xstream_gg, sys.dbms_xstream_gg_adm, sys.dbms_xs_mtcache, sys.dbms_xs_sessions, sys.dbms_xs_sidp, sys.dbms_zhelp, sys.dbms_zhelp_ir, sys.dmp_sys, sys.htf, sys.htp, sys.kupcc, sys.odciconst, sys.odm_model_util, sys.odm_util, sys.outln_pkg, sys.owa, sys.owa_cache, sys.owa_cookie, sys.owa_custom, sys.owa_image, sys.owa_match, sys.owa_opt_lock, sys.owa_pattern, sys.owa_sec, sys.owa_text, sys.owa_util, sys.pbsde, sys.plitblm, sys.private_jdbc, sys.prvtemx_sql, sys.prvt_ash_omx, sys.prvt_emx, sys.sqlfw$datapump, sys.urifactory, sys.utl_call_stack, sys.utl_coll, sys.utl_compress, sys.utl_encode, sys.utl_file, sys.utl_gdk, sys.utl_http, sys.utl_i18n, sys.utl_ident, sys.utl_inaddr, sys.utl_lms, sys.utl_match, sys.utl_nla, sys.utl_raw, sys.utl_recomp, sys.utl_ref, sys.utl_smtp, sys.utl_tcp, sys.utl_url, sys.wpg_docload, sys.xs_acl, sys.xs_admin_cloud_util, sys.xs_admin_int, sys.xs_admin_util, sys.xs_data_security, sys.xs_data_security_util, sys.xs_diag, sys.xs_namespace, sys.xs_principal, sys.xs_roleset, sys.xs_security_class, xdb.dbms_clobutil, xdb.dbms_csx_int, xdb.dbms_csx_int2, xdb.dbms_json, xdb.dbms_soda_admin, xdb.dbms_soda_dom, xdb.dbms_soda_user_admin, xdb.dbms_xmldom, xdb.dbms_xmlindex, xdb.dbms_xmlparser, xdb.dbms_xslprocessor, xdb.ximetadata_pkg

References

same as Trivadis G-7510