Re: Unix Audit

Type last -15 and see if he was on when you lost the files. From there I think you could check root's history.

Dave Turner

On Wed, Oct 04, 2000 at 12:35:33PM -0800, dmeng_at_focal.com wrote:
> Hi All,
> This morning one of my databases mysteriously disappeared and I was able to
> get it back but, I also want to
> find out what happened. I suspect that the unix admin deleted the data
> files on OS level but don't know unix
> well enough to prove this. I know you can do audits on commands with Unix
> but can anyone tell me if it is possible for me to do audit on root user?
>
> TIA
>
> Dennis Meng
> Database Administrator
> Focal Communications
> 847-954-8328
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author:
> INET: dmeng_at_focal.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
Received on Wed Oct 04 2000 - 15:35:16 CDT