Masking sensitive information in the Oracle ZIP package

The ZIP package contains a significant amount of potentially sensitive information gathered across all the nodes where Oracle software is installed. That information includes:

  • User names
  • Host names, machine IDs, and IP addresses

Oracle requires that all the masked items are traceable that means, for example, that each time the specific host name is masked, the same key is used, so across all the appearances of the specific key, we can track that it refers to one specific host name. This data anonymization will also be non-reversible.

The BigFix Inventory server includes a tool that meets the above requirements.

Note: Due to the complexity of the data gathered, the mechanism can miss important pieces. It is strongly advised to review the masked package before sending it outside. If the gap is beyond a manual fix, contact BigFix support.

To run the tool, a user requires root access to the BFI Server filesystem. Scripts are located as:

Windows:\Program Files\BigFix Enterprise\BFI\wlp\bin\

Linux: /opt/BFI/wlp/bin/

Example usage:
bfiUtility.bat maskOracleAuditingData --inputFile="INPUT_PATH" --outputFile="OUTPUT_PATH"

Instead of INPUT_PATH, put the full path of the file to be processed. The file will not be changed during the processing. Instead of OUTPUT_PATH, put the full path of the output file. The file will be overwritten.