Re: How do you audit a DBA?

I once told a user - on a dumb terminal - (or was that a dumb user on a terminal...) that the character mode computer system monitors what they do at their desks.

I was kidding, I promise. Maybe I even smiled.

Within hours I was called in to the CFO. The users were revolting.

Oy vey.

yosi

"Mohan, Ross" wrote:

> Maybe too clever?
>
> Hell, they haven't fired me yet!
>
> Of course, every time i type something, my network card lights up and my
> hard drive
> whirs, but other than that, I have no reason to suspect my every breath is
> being monitored!
>
> -----Original Message-----
> Sent: Thursday, August 23, 2001 1:27 PM
> To: Multiple recipients of list ORACLE-L
>
> '..fire him, not the trigger.'
>
> ver-y clever.
>
> -----Original Message-----
> Sent: Thursday, August 23, 2001 9:47 AM
> To: Multiple recipients of list ORACLE-L
>
> Oh hell, if you don't trust him, just fire him, not the trigger.
>
> -----Original Message-----
> Sent: Thursday, August 23, 2001 11:56 AM
> To: Multiple recipients of list ORACLE-L
>
> Anyone who can help,
>
> I've been asked if Oracle can somehow audit the DBA ie. Raise an alert if
> the DBA were to execute DML statements against sensitive tables, this
> assumes the DBA has the SYS password. I thought this was a pretty
> reasonable question but couldn't think of an answer. My trail of though was
> maybe an email alert to a designated member of staff sent via a trigger on
> the table.
>
> Any comments would be very appreciated.
>
> Dave Leach
>
>
>
> **********************************************************************
> The above information is confidential to the addressee and may be
> privileged. Unauthorised access and use is prohibited.
>
> Internet communications are not secure and therefore this Company does
> not accept legal responsibility for the contents of this message.
>
> If you are not the intended recipient, any disclosure, copying,
> distribution or any action taken or omitted to be taken in reliance on
> it, is prohibited and may be unlawful.
>
> Claybrook Computing Limited is a subsidiary of
> Claybrook Computing (Holdings) Limited
> Registered Office: Abbey House. 282 Farnborough Road, Farnborough,
> Hampshire GU14 7NJ
> Registered in England and Wales No 1287205
>
> A Hogg Robinson plc company
> **********************************************************************
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Dave Leach
> INET: Dave.Leach_at_claybrook.co.uk
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Mohan, Ross
> INET: MohanR_at_STARS-SMI.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: John Lewis
> INET: jlewis_at_punchnetworks.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Mohan, Ross
> INET: MohanR_at_STARS-SMI.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

--
Thanks,

Yosi


---------------------------------------------------------
Yosi Greenfield
Oracle Certified DBA
ygreenfield_at_compuserve.com


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Yosi Greenfield
  INET: yosi_at_comhill.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).