Re: Sarbanes-Oxley

bsc7080mqc_at_x.mylxhq.com wrote:

> I will have to check with my DBA's and see what they did, but at my employment we have special accounts that we log in as
> individuals (we each get our own). These accounts apparently have logging turned on which tells them what we are doing exactly. I
> don't think it alerts them that I signed on, but they can report on it. I suppose one could prepare a logon trigger that would alert
> someone when a person logs on.
>
> But as far as tracking activities, I think we are doing that now. Tracking our unix activities is a bit more difficult so we
> instituted specific rules regarding permissions for key directories.
>
> If you would like I can talk to my DBA's.
>
> Barry
>
> P.S. Remember that FTP/Mail routines I did.... we upgraded to 9iR2 and I was able to fully enable binary support for FTP and Email.
> Also implemented the usage of the DBA Directories feature. Works pretty slick now. Only thing missing is compression utilities, but
> that doesn't come till 10g ... can't wait.
>
> On Fri, 29 Oct 2004 19:02:31 -0700, DA Morgan <damorgan_at_x.washington.edu> wrote:
>
>

>>>did you think about OS auditing ?
>>
>>I did. But how is that going to catch someone logging in from SQL*Plus?
>>I don't just need to know they are there ... I need to know what they
>>are doing. I think it impossible but that doesn't mean someone out there
>>doesn't know how to do it.
>>
>>Thanks.

Tracking non-DBA accounts is not the issue. It is logging actions taken when logged in as SYS, SYSTEM, and INTERNAL that is my issue.

Thanks.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace 'x' with 'u' to respond)