Oracle FAQ Your Portal to the Oracle Knowledge Grid

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Oracle OS level security

Re: Oracle OS level security

From: Jared Still <>
Date: Thu, 28 Nov 2002 16:48:40 -0800
Message-ID: <>

On Thursday 28 November 2002 03:53, O'Neill, Sean wrote:

> We has a Standard Operating Procedure which states that whilst DBA's have a
> access to data they will not change it. A recognition of the DBA's
> capabilties but stating on paper company trust they will "behave"
> themselves.

Auditors are usually bean counters (accountants).

They don't trust anybody.

> On a more practical point with NT/W2K Oracle audit trail can be set to
> write audit trail records to the event logs. DBA's can be prevented from
> changing the event logs. So now it would take at least 2 people to
> instigate a fraud. Hey this might foster even better relations between
> DBA's and SA's ;)

OS level audit trails won't track block level hacking, such as with BBED.


> Just my 2 cent worth :)
> -------------------------
> Seán O' Neill
> Organon (Ireland) Ltd.
> [subscribed: digest mode]
> >> From:
> >> Date: Tue, 26 Nov 2002 14:40:24 -0800
> >> Subject: Oracle OS level security
> >>
> >>Dear list,
> >>
> >>Let me toss a hypothetical situation at you.
> etc. etc.
> --------------------------------------------------------------------
> This message, including attached files, may contain confidential
> information and is intended only for the use by the individual
> and/or the entity to which it is addressed. Any unauthorized use,
> dissemination of, or copying of the information contained herein is
> not allowed and may lead to irreparable harm and damage for which
> you may be held liable. If you receive this message in error or if
> it is intended for someone else please notify the sender by
> returning this e-mail immediately and delete the message.
> --------------------------------------------------------------------

Please see the official ORACLE-L FAQ:
Author: Jared Still

Fat City Network Services    -- 858-538-5051
San Diego, California        -- Mailing list and web hosting services
To REMOVE yourself from this mailing list, send an E-Mail message
to: (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Thu Nov 28 2002 - 18:48:40 CST

Original text of this message