Re: Sarbanes-Oxley

From: DA Morgan <damorgan_at_x.washington.edu>
Date: Fri, 29 Oct 2004 19:02:31 -0700
Message-ID: <1099101690.698157@yasure>

Oradba Linux wrote:

> "DA Morgan" <damorgan_at_x.washington.edu> wrote in message
> news:1099009667.807386_at_yasure...
> 

>>I just picked up a new publicly held company as a client today that has,
>>I know I know, multiple applications running on 7.3.3 on a paleolithic
>>version of Solaris.
>>
>>My question ... can anyone think of a way to audit logons and activities
>>conducted by SYS, SYSTEM, and INTERNAL?
>>
>>I don't think so but then some of you, unfortunately, have been forced
>>to work in version 7 for the last decade and may know, or remember,
>>something. Upgrading will come soon ... but the need to comply with the
>>law will come sooner.
>>
>>Thanks.
>>--
>>Daniel A. Morgan
>>University of Washington
>>damorgan_at_x.washington.edu
>>(replace 'x' with 'u' to respond)

> 
> 
> did you think about OS auditing ?

I did. But how is that going to catch someone logging in from SQL*Plus? I don't just need to know they are there ... I need to know what they are doing. I think it impossible but that doesn't mean someone out there doesn't know how to do it.

Thanks.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace 'x' with 'u' to respond)

Received on Fri Oct 29 2004 - 21:02:31 CDT