Re: Sarbanes-Oxley

I will have to check with my DBA's and see what they did, but at my employment we have special accounts that we log in as individuals (we each get our own). These accounts apparently have logging turned on which tells them what we are doing exactly. I don't think it alerts them that I signed on, but they can report on it. I suppose one could prepare a logon trigger that would alert someone when a person logs on.

But as far as tracking activities, I think we are doing that now. Tracking our unix activities is a bit more difficult so we instituted specific rules regarding permissions for key directories.

If you would like I can talk to my DBA's.

Barry

P.S. Remember that FTP/Mail routines I did.... we upgraded to 9iR2 and I was able to fully enable binary support for FTP and Email. Also implemented the usage of the DBA Directories feature. Works pretty slick now. Only thing missing is compression utilities, but that doesn't come till 10g ... can't wait.

On Fri, 29 Oct 2004 19:02:31 -0700, DA Morgan <damorgan_at_x.washington.edu> wrote:

>>
>> did you think about OS auditing ?
>
>I did. But how is that going to catch someone logging in from SQL*Plus?
>I don't just need to know they are there ... I need to know what they
>are doing. I think it impossible but that doesn't mean someone out there
>doesn't know how to do it.
>
>Thanks.
Received on Sat Oct 30 2004 - 01:52:25 CDT