Hardening Oracle

[williey]

I tried to revoke the below permission but I keep getting the "ORA-01927: cannot REVOKE privileges you did not grant"
even though I'm logged in as SYS. dba_tab_privs shows SYS as the grantor.

revoke SELECT on SYS.DBA_USERS from PUBLIC; 
revoke SELECT on SYS.EXU7LNK from PUBLIC; 
revoke SELECT on SYS.EXU7LNKU from PUBLIC; 
revoke SELECT on SYS.EXU7ROL from PUBLIC; 
revoke SELECT on SYS.EXU7USR from PUBLIC; 
revoke SELECT on SYS.EXU7USRU from PUBLIC; 
revoke SELECT on SYS.EXU8LNK from PUBLIC; 
revoke SELECT on SYS.EXU8LNKU from PUBLIC; 
revoke SELECT on SYS.EXU8PHS from PUBLIC; 
revoke SELECT on SYS.EXU8PHS from PUBLIC; 
revoke SELECT on SYS.EXU8ROL from PUBLIC; 
revoke SELECT on SYS.EXU8USR from PUBLIC; 
revoke SELECT on SYS.EXU8USRU from PUBLIC; 
revoke SELECT on SYS.EXU9LNK from PUBLIC; 
revoke SELECT on SYS.EXU9LNK from PUBLIC; 
revoke SELECT on SYS.EXU9LNKU from PUBLIC; 
revoke SELECT on SYS.EXU9LNKU from PUBLIC; 
revoke SELECT on SYS.KU$_ROLE_VIEW from PUBLIC; 
revoke SELECT on SYS.KU$_USER_VIEW from PUBLIC; 
revoke SELECT on SYS.LINK$ from PUBLIC; 
revoke SELECT on SYS.USER$ from PUBLIC; 
revoke SELECT on SYS.USER_DB_LINKS from PUBLIC; 
revoke SELECT on SYS.USER_HISTORY$ from PUBLIC;

------------------------------------------
There are 10 kinds of people in this world. One that understands binary and the other one that does not.

 

[karluk]

Uh, what makes you think that select has been granted to public on any of these catalog objects? For sure the first one isn't - DBA views such as DBA_USERS aren't accessible to ordinary Oracle users.