Hi,
I have a security audit to not have any user with default password in 11gr1. This can be queried from
select username,account_status
from dba_users
where username in
(SELECT username
FROM dba_users_with_defpwd)
Now, I understand XS$NULL is not real user and documentation says *"An internal account that represents the absence of a user in a session. Because XS$NULL is not a user, this account can only be accessed by the Oracle Database instance. XS$NULL has no privileges and no one can authenticate as XS$NULL, nor can authentication credentials ever be assigned to XS$NULL."*
But what happens if I change its password? Will some functionality break?