RE: How do you audit a DBA?

This has been discussed before, I'll try to summarize it as I remember.

Sure, you could put triggers, turn on auditing, whatever. But the DBA by nature of his job function, can disable, remove, whatever you turn on.

So it basically comes down to trusting your DBA, or getting a new DBA.

> -----Original Message-----
> From: Dave Leach [mailto:Dave.Leach_at_claybrook.co.uk]
> Sent: Thursday, August 23, 2001 11:56 AM
> To: Multiple recipients of list ORACLE-L
> Subject: How do you audit a DBA?
>
>
> Anyone who can help,
>
> I've been asked if Oracle can somehow audit the DBA ie. Raise
> an alert if
> the DBA were to execute DML statements against sensitive tables, this
> assumes the DBA has the SYS password. I thought this was a pretty
> reasonable question but couldn't think of an answer. My
> trail of though was
> maybe an email alert to a designated member of staff sent via
> a trigger on
> the table.
>
> Any comments would be very appreciated.
>
> Dave Leach
>

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Anderson, Brian
  INET: andersob_at_mail.dartnet.peachnet.edu

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).