They don't do a great job of monitoring as all they record is the fact
that someone logged in. But then the other auditing Oracle does (or did
in earlier versions, I haven't investigated it in 9i) didn't capture
much information either.
Since we used to automate, via cron, some of the startup/shutdown and
DBA functions, and we created an account within the database for the
oracle Unix account... the aud trace files never told us much of
anything.
I don't want to know only that someone tried to get in, I want to now
how he/she tried
- Mogens_Nørgaard <mln_at_miracleas.dk> wrote:
> They were put there in 7.1 in order to comply with some security
> standard. And their purpose is exactly to prevent a dba from logging
> in
> without being monitored. It's in the 7.1 new features manual, as far
> as
> I remember. That's also the version where it was suddenly not
> possible
> for the poor deveopers to see their own tracefiles, except if they
> set
> _trace_files_public=true.
>
> Mogens
>
> Rachel Carmichael wrote:
>
> >IIRC, these files are generated whenever someone logs in as sysdba
> or
> >internal. I don't know of any way to stop them.
> >
> >
> >--- Kevin Lange <kgel_at_ppoone.com> wrote:
> >
> >
> >>I thought I had these files stopped .... but apparently not.
> >>
> >>Is there somone out there who can tell me how to stop the Audit
> files
> >>from
> >>appearing in the audit_file_dest ??? I thought if I set the
> >>audit_trail to
> >>false then these would stop as well ... Apparently not.
> >>
> >>Anyone have an idea how to turn them off ??
> >>
> >>Thanks
> >>
> >>Kevin
> >>--
> >>Please see the official ORACLE-L FAQ: http://www.orafaq.net
> >>--
> >>Author: Kevin Lange
> >> INET: kgel_at_ppoone.com
> >>
> >>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> >>San Diego, California -- Mailing list and web hosting
> services
>
>>---------------------------------------------------------------------
> >>To REMOVE yourself from this mailing list, send an E-Mail message
> >>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> >>the message BODY, include a line containing: UNSUB ORACLE-L
> >>(or the name of mailing list you want to be removed from). You may
> >>also send the HELP command for other information (like
> subscribing).
> >>
> >>
> >>
> >
> >
> >__________________________________________________
> >Do you Yahoo!?
> >Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> >http://mailplus.yahoo.com
> >
> >
>
>
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Rachel Carmichael
INET: wisernet100_at_yahoo.com
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Fri Dec 27 2002 - 06:49:02 CST