RE: How do you audit a DBA?

From: John Lewis <jlewis_at_punchnetworks.com>
Date: Thu, 23 Aug 2001 09:53:53 -0700
Message-ID: <F001.00375632.20010823092706@fatcity.com>

'..fire him, not the trigger.'

ver-y clever.

-----Original Message-----
Sent: Thursday, August 23, 2001 9:47 AM
To: Multiple recipients of list ORACLE-L

Oh hell, if you don't trust him, just fire him, not the trigger.

-----Original Message-----
Sent: Thursday, August 23, 2001 11:56 AM To: Multiple recipients of list ORACLE-L

Anyone who can help,

I've been asked if Oracle can somehow audit the DBA ie. Raise an alert if the DBA were to execute DML statements against sensitive tables, this assumes the DBA has the SYS password. I thought this was a pretty reasonable question but couldn't think of an answer. My trail of though was maybe an email alert to a designated member of staff sent via a trigger on the table.

Any comments would be very appreciated.

Dave Leach  

---

The above information is confidential to the addressee and may be privileged. Unauthorised access and use is prohibited.

Internet communications are not secure and therefore this Company does not accept legal responsibility for the contents of this message.

If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.

Claybrook Computing Limited is a subsidiary of Claybrook Computing (Holdings) Limited
Registered Office: Abbey House. 282 Farnborough Road, Farnborough, Hampshire GU14 7NJ
Registered in England and Wales No 1287205

A Hogg Robinson plc company

---

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Dave Leach
  INET: Dave.Leach_at_claybrook.co.uk

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Mohan, Ross
  INET: MohanR_at_STARS-SMI.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: John Lewis
  INET: jlewis_at_punchnetworks.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Thu Aug 23 2001 - 11:53:53 CDT