Re: What happens to Oracle when sys.aud$ table or Oracle OS Audit file reaches storage capacity?

From: Ian Cary <ian.cary_at_ons.gsi.gov.uk>
Date: Fri, 26 Feb 2010 16:07:15 +0000
Message-ID: <OF2A29F8C1.9881B5F4-ON802576D6.00581CD2-802576D6.00588DCC_at_ons.gsi.gov.uk>

It depends of course on what you are doing / auditing but a simple test where I deliberately placed the audit trail where it couldn't extend caused the transaction to fail with

ORA-02002: error while writing to audit trail ORA-01653: unable to extend table SYS.AUD$ by 128 in tablespace AUDIT_DATA

Sorry if you are already aware of this but also if you were auditing a inserts for example all the inserts you had created up until this point would still be recorded in the SYS.AUD$ table however the actual inserts themselves will have been rolled back.

Cheers,

Ian

|---------+----------------------------->


|         |           ArnoldS_at_osti.gov  |

|         |           Sent by:          |

|         |           oracle-l-bounce_at_fr|

|         |           eelists.org       |

|         |                             |

|         |                             |

|         |           26/02/2010 15:43  |

|         |           Please respond to |

|         |           ArnoldS           |

|         |                             |

|---------+----------------------------->
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |                                                                                                                                                  |
  |       To:       oracle-l_at_freelists.org                                                                                                           |
  |       cc:                                                                                                                                        |
  |       Subject:  What happens to Oracle when sys.aud$ table or Oracle OS Audit file reaches storage capacity?                                     |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|

I am writing an Oracle Security Test plan. One of the controls requires Oracle to stop processing transactions if the Oracle OS Audit files or the sys.aud$ table reaches storage capacity. I cannot find any documentation that lets me know what happens to Oracle when this occurs. Does Oracle react the same way as when the Archive Log area reaches storage capacity? The version of Oracle that I am using is 11.2.0.1 on Linux x86-64.

Thanks,

Sandra Arnold
Sr. Database Administrator
OSTI/DOE
Oak Ridge, TN

This email was received from the INTERNET and scanned by the Government Secure Intranet anti-virus service supplied by Cable&Wireless in partnership with MessageLabs. (CCTM Certificate Number 2009/09/0052.) In case of problems, please call your organisation?x02019;s IT Helpdesk. Communications via the GSi may be automatically logged, monitored and/or recorded for legal purposes.

For the latest data on the economy and society consult National Statistics at http://www.statistics.gov.uk

---

Please Note: Incoming and outgoing email messages are routinely monitored for compliance with our policy on the use of electronic communications

---

Legal Disclaimer : Any views expressed by the sender of this message are not necessarily those of the Office for National Statistics

---

The original of this email was scanned for viruses by the Government Secure Intranet virus scanning service supplied by Cable&Wireless in partnership with MessageLabs. (CCTM Certificate Number 2009/09/0052.) On leaving the GSi this email was certified virus free. Communications via the GSi may be automatically logged, monitored and/or recorded for legal purposes.

--
http://www.freelists.org/webpage/oracle-l

Received on Fri Feb 26 2010 - 10:07:15 CST