Re: Oracle OS level security

On Thursday 28 November 2002 03:53, O'Neill, Sean wrote:

> We has a Standard Operating Procedure which states that whilst DBA's have a
> access to data they will not change it. A recognition of the DBA's
> capabilties but stating on paper company trust they will "behave"
> themselves.

Auditors are usually bean counters (accountants).

They don't trust anybody.

>
> On a more practical point with NT/W2K Oracle audit trail can be set to
> write audit trail records to the event logs. DBA's can be prevented from
> changing the event logs. So now it would take at least 2 people to
> instigate a fraud. Hey this might foster even better relations between
> DBA's and SA's ;)

OS level audit trails won't track block level hacking, such as with BBED.

Jared

>
> Just my 2 cent worth :)
> -------------------------
> Seán O' Neill
> Organon (Ireland) Ltd.
> [subscribed: digest mode]
>
> >> From: Jared.Still_at_radisys.com
> >> Date: Tue, 26 Nov 2002 14:40:24 -0800
> >> Subject: Oracle OS level security
> >>
> >>Dear list,
> >>
> >>Let me toss a hypothetical situation at you.
>
> etc. etc.
> --------------------------------------------------------------------
> This message, including attached files, may contain confidential
> information and is intended only for the use by the individual
> and/or the entity to which it is addressed. Any unauthorized use,
> dissemination of, or copying of the information contained herein is
> not allowed and may lead to irreparable harm and damage for which
> you may be held liable. If you receive this message in error or if
> it is intended for someone else please notify the sender by
> returning this e-mail immediately and delete the message.
> --------------------------------------------------------------------

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Jared Still
  INET: jkstill_at_cybcon.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).