RE: Audit files for dba connections

Yes, it is the default - see below from the 8i documentation, available online at http://download-west.oracle.com/docs/cd/A87860_01/doc/server.817/a76956/audit.htm#1156:

Events Audited by Default

Regardless of whether database auditing is enabled, Oracle will always audit certain database-related actions into the operating system audit trail. These events include the following:

• Instance startup

An audit record is generated that lists the OS user starting the instance, the user's terminal identifier, the date and time stamp, and whether database auditing was enabled or disabled. This is stored in the OS audit trail because the database audit trail is not available until after startup has successfully completed. Recording the state of database auditing at startup also prevents an administrator from restarting a database with database auditing disabled (so they can perform unaudited actions).

• Instance shutdown

An audit record is generated that lists the OS user shutting down the instance, the user's terminal identifier, the date and time stamp.

• Connections to the database with administrator privileges

An audit record is generated that lists the OS user connecting to Oracle as SYSOPER or SYSDBA, to provide accountability of users with administrator privileges.

On operating systems that do not make an audit trail accessible to Oracle, these audit trail records are placed in an Oracle audit trail file in the same directory as background process trace files.

Regards,

Brandon

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[ mailto:oracle-l-bounce_at_freelists.org]On Behalf Of Oded Maimon Sent: Monday, August 15, 2005 3:46 PM
To: oracle-l_at_freelists.org
Subject: Re: Audit files for dba connections

but this is not the default, you need to enable it (as far as i can remember)

Reidy, Ron wrote:

>All SYSDBA connections generate an external audit trail.
>
>-----------------
>Ron Reidy
>Lead DBA
>Array BioPharma, Inc.
>
>

--
http://www.freelists.org/webpage/oracle-l



Privileged/Confidential Information may be contained in this message or attachments hereto. Please advise immediately if you or your employer do not consent to Internet email for messages of this kind. Opinions, conclusions and other information in this message that do not relate to the official business of this company shall be understood as neither given nor endorsed by it.


--
http://www.freelists.org/webpage/oracle-l