Home » RDBMS Server » Security » NOAUDIT (Oracle 11g/Windows 7)
NOAUDIT [message #607386] Wed, 05 February 2014 06:49 Go to next message
prejib
Messages: 121
Registered: March 2009
Location: India
Senior Member
Hi ,

I have given the noaudit statement for DMLs as given below . still I am getting the belowresult. Can you please help me how can I disable the select table audit and other DMLs also ?
SQL> noaudit all;

Noaudit succeeded.

SQL>  noaudit select any table;

Noaudit succeeded.
SQL> set linesize 600
SQL>  select
  2   ACTION#,
  3   SQLTEXT
  4   from sys.aud$ where userid='TEST' and rownum<10 ;

   ACTION# SQLTEXT
---------- --------------------------------------------------------------------------------
       100
       103 select sid from V$SESSION  where audsid = ( select USERENV('SESSIONID') from dua
       103 select sid from V$SESSION  where audsid = ( select USERENV('SESSIONID') from dua
       103 select sid from V$SESSION  where audsid = ( select USERENV('SESSIONID') from dua
       103 select sid from V$SESSION  where audsid = ( select USERENV('SESSIONID') from dua
       103 select sid from V$SESSION  where audsid = ( select USERENV('SESSIONID') from dua
       103 select sid from V$SESSION  where audsid = ( select USERENV('SESSIONID') from dua
       103 select sid from V$SESSION  where audsid = ( select USERENV('SESSIONID') from dua
       103 SELECT * FROM session_roles where role='DBA'

9 rows selected.
Re: NOAUDIT [message #607395 is a reply to message #607386] Wed, 05 February 2014 08:10 Go to previous messageGo to next message
Michel Cadot
Messages: 59810
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

From the documentation:
Quote:
Specify ALL to stop auditing of all statement options currently being audited because of an earlier AUDIT ALL ... statement.


" noaudit select any table;" only stop auditing "SELECT ANY TABLE" privilege.

You have to specify NOAUDIT for everything you started an audit.

Re: NOAUDIT [message #607396 is a reply to message #607395] Wed, 05 February 2014 08:17 Go to previous message
Michel Cadot
Messages: 59810
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

In addition, there are 3 kinds of audit:
- audit privilege (select any table)
- audit statement (select table)
- audit object (select on scott.emp)
You cannot "noaudit" one with a NOAUDIT statement that is not of the statement kind of the AUDIT that started it.

These kinds of audit are shown in 3 views:
- DBA_PRIV_AUDIT_OPTS
- DBA_STMT_AUDIT_OPTS
- DBA_OBJ_AUDIT_OPTS

Previous Topic: Is is possible to restrict user's password reset by SELF
Next Topic: Unlock ops$oracle in oracle 11g
Goto Forum:
  


Current Time: Thu Nov 27 07:54:43 CST 2014

Total time taken to generate the page: 0.07690 seconds