Re: Oracle/Server Audit

From: <Jared.Still_at_radisys.com>
Date: Mon, 24 Sep 2001 14:08:09 -0700
Message-ID: <F001.00396F67.20010924142019@fatcity.com>

Srini,

You hit the jackpot with this site. There's quite a bit there to take a look at, including 'programs' for auditing Oracle, and a security audit for SAP.

Pour yourself a cool one.

http://www.virtualbeer.com/vb/images/gallery/labels/sn_palebock1.jpg

Jared

                                                                                       
                              
                    Srini.Chavali_at_c                                                    
                              
                    ummins.com            To:     Multiple recipients of list ORACLE-L 
<ORACLE-L_at_fatcity.com>        
                    Sent by:              cc:                                          
                              
                    root_at_fatcity.co       Subject:     Re: Oracle/Server Audit         
                              
                    m                                                                  
                              
                                                                                       
                              
                                                                                       
                              
                    09/24/01 01:14                                                     
                              
                    PM                                                                 
                              
                    Please respond                                                     
                              
                    to ORACLE-L                                                        
                              
                                                                                       
                              
                                                                                       
                              

Jared,
Does this help ?
http://www.auditnet.org/asapind.htm
Srini Chavali
Oracle DBA
Cummins Inc

Jared.Still_at_radisys.com_at_fatcity.com on 09/24/2001 02:27:31 PM

Please respond to ORACLE-L_at_fatcity.com

Sent by: root_at_fatcity.com

To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc:

First off, let me state that this post is NOT referring to Oracle Database Auditing.

That may be one of the criteria in the audit I'm referring to, but is only peripherally
relevant to my question.

What I need is a document that can be used to audit a server that one or more
Oracle databases are on, audit the setup and configuration of the database itself, as well as an audit of operational items.

Here are examples:

System:

OS version
Physical/Logical volume layout.
Is it local, SAN, NAS or something else?

Backup hardware, software and capabilities.

There can be OS specific sections:

Unix:
Oracle database owner.
location of oratab

NT:

Domain:
Failsafe in use?
Details if so.

Oracle:

Have default passwords been changed?
Who has DBA access?
Who requires DBA access?
Is Archiving on?
If so, is it setup properly?

Operational:

OS monitoring, backup and deletion of archive logs?

OS level monitoring in place. e.g. disk space, alert.log monitoring, sniped session monitor, etc.

Backup/recovery tested?
Documented?

And lastly, a section with recommendations for all of the above.

All comments, suggestions and recommendations are welcome.

URL's to document(s) with a fair amount of this already in place are especially welcome, and will be rewarded with a virtual beer, or beverage of your choice. :)

Or if I see you at IOUG, a real one.

Thanks

Jared

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
  INET: Srini.Chavali_at_Cummins.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Sep 24 2001 - 16:08:09 CDT