From Srini.Chavali@Cummins.com Mon, 24 Sep 2001 11:56:33 -0700 From: Srini.Chavali@Cummins.com Date: Mon, 24 Sep 2001 11:56:33 -0700 Subject: Re: Oracle/Server Audit Message-ID: MIME-Version: 1.0 Content-Type: text/plain Jared, Does this help ? http://www.auditnet.org/asapind.htm Srini Chavali Oracle DBA Cummins Inc Jared.Still@radisys.com@fatcity.com on 09/24/2001 02:27:31 PM Please respond to ORACLE-L@fatcity.com Sent by: root@fatcity.com To: Multiple recipients of list ORACLE-L cc: First off, let me state that this post is NOT referring to Oracle Database Auditing. That may be one of the criteria in the audit I'm referring to, but is only peripherally relevant to my question. What I need is a document that can be used to audit a server that one or more Oracle databases are on, audit the setup and configuration of the database itself, as well as an audit of operational items. Here are examples: System: OS version Physical/Logical volume layout. Is it local, SAN, NAS or something else? Backup hardware, software and capabilities. There can be OS specific sections: Unix: Oracle database owner. location of oratab NT: Domain: Failsafe in use? Details if so. Oracle: Have default passwords been changed? Who has DBA access? Who requires DBA access? Is Archiving on? If so, is it setup properly? Operational: OS monitoring, backup and deletion of archive logs? OS level monitoring in place. e.g. disk space, alert.log monitoring, sniped session monitor, etc. Backup/recovery tested? Documented? And lastly, a section with recommendations for all of the above. All comments, suggestions and recommendations are welcome. URL's to document(s) with a fair amount of this already in place are especially welcome, and will be rewarded with a virtual beer, or beverage of your choice. :) Or if I see you at IOUG, a real one. Thanks Jared -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: Jared.Still@radisys.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: Srini.Chavali@Cummins.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).