Permissions for NetBackup for Oracle log directories
In UNIX, NetBackup uses the /usr/openv/netbackup/logs directory tree for the recording of troubleshooting information. NetBackup also uses this directory tree for progress and communication updates to users and other NetBackup applications. Restrictive permissions on these directories can not only disable the collection of troubleshooting data, but also prevent the application itself from functioning correctly.
Backup operations and restore operations fail when permissions are too restrictive. We recommend that you make all of the /usr/openv/netbackup/logs directories and subdirectories readable and writeable by all users (777 permissions). However, security requirements may prohibit global read-write access. If so, you can restrict permissions of specific directories to a single group or user. If you do restrict permissions, you have to make sure that these restrictions do not affect backup and restore operations. This means that all operations must be initiated using a process that has read and write access to the /usr/openv/netbackup/logs directory and subdirectories.
Check that the /usr/openv/netbackup/logs/user_ops directory tree has 777 permissions. The items in this directory need to be accessible for the applications to operate correctly.
If you restrict permissions on the other directories that are located in /usr/openv/netbackup/logs, backup and restore operations are not affected. However, troubleshooting efforts may be hindered when processes do not have the appropriate permissions to update their designated debug logs.
In Windows, a situation can occur during backup and restore jobs of Oracle 12c where no debug log files are created in the dbclient and bpdbsbora folders. In the Oracle 12c release, an Oracle user can be a Windows built-in account (LocalSystem or LocalService) or a standard Windows user account. This issue is the result of security permissions for standard (non-administrator) Windows user accounts.
If a standard (non-administrator) Windows user account is used, the Oracle user may not have the proper privileges to write to the dbclient and bpdbsbora folders. To avoid this issue, change the Windows security permissions of the dbclient and bpdbsbora folders to give the Oracle user permissions.
You need to review permissions on the user_ops folder and subfolders. By default, these folders are writeable by all users. If restrictive settings have been configured, ensure that full access is granted for any standard Windows user account that is used. Otherwise, backup and restore operations can fail.
For more information about how restrictive settings can cause issues during backups, restores, or troubleshooting, refer to the following article: