| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Oracle Baselines and Java Internals
List,
As part of the never ending SarbOx effort, I'm putting together a method
to get a
baseline of Oracle databases for auditing purposes.
My current criteria for this are as follows:
Track the following items in a separate database.
Structure of:
Tables
Indexes
Views
Contents of:
Triggers
Procedures
Functions
Packages
Java in the database
Track DDL_TIME, CREATION_DATE and TIMESTAMP for all objects.
Compute checksums for code objects.
The section I'm unsure of is in regards to Java. I don't believe that
Oracle
actually stores all Java in the database. For instance, when you install
Java
in the database, my understanding is that the JVM resolves the location
of the classes to whatever lib is pointed to, much as a std JVM does.
In addition, Java source *may* be stored in the database, as seen by
select *
from dba_source
where type = 'JAVA SOURCE'
I need to be able to detect if changes were made in the database. The timestamps in DBA_OBJECTS will let me know the last time an object was touched, but that does not necessarily mean that the object actually changed. It could have just been recompiled. Hence the checksums.
If the Java is external ($OH/rdbms/jlib) , is is possible for the java
code to change
without modifying anything in the database. In this case, checking the
validity
of the code objects becomes a process external to Oracle.
Regarding Java, yes, my ignorance is showing, but I have not been able to find any references that explains how Oracle resolves Java, and other Oracle/Java internals.
Any insights into this are most welcome.
Thanks,
Jared
-- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.htmlReceived on Tue Jul 20 2004 - 16:01:44 CDT
-----------------------------------------------------------------
 |
 |