Oracle Database Discussions

Hi. We have a customer who is very concerned about security. They own the root user and will be running root.sh. They are asking questions like 'why does oracle need to change permissions on some files to root'? Does anyone know of any documentation that describes they "why" of root.sh ?

Specifically these commands are in question:

$CHMOD 4710 $ORACLE_HOME/bin/nmo
$CHMOD 4710 $ORACLE_HOME/bin/nmb
$CHMOD 4710 $ORACLE_HOME/bin/nmhs

$CHMOD 4750 $ORACLE_HOME/bin/oradism
$CHMOD 4750 $ORACLE_HOME/bin/extjob
$CHMOD 4750 $ORACLE_HOME/bin/jssu

$CHMOD 4555 $FILEMAPLOC/bin/fmputlhp

$CHOWN root $ORACLE_HOME/bin/nmo
$CHOWN root $ORACLE_HOME/bin/nmb
$CHOWN root $ORACLE_HOME/bin/nmhs

$CHOWN root $ORACLE_HOME/bin/oradism
$CHOWN root $ORACLE_HOME/bin/extjob
$CHOWN root $ORACLE_HOME/rdbms/admin/externaljob.ora
$CHOWN root $ORACLE_HOME/bin/jssu

Thanks, -Dan