its the oracle executable which runs everything, you will notice it has the setuid permission set so that everytime you want to run something, it gets run as the oracle user. Play with it at your peril

It is a documented feature that if you run it you get a ORA-600