RE: Security Message

From: Wolfson Larry - lwolfs <lawrence.wolfson_at_acxiom.com>
Date: Tue, 16 May 2006 12:20:43 -0500
Message-ID: <B39B7B7D8C8CEA419D0ED45FD7FA4C530140DC25@CWYMSX06.Corp.Acxiom.net>

Tom,

It's a mandate from this client's auditing/security groups.

Actually we're not really auditing anything with this.

I like the trigger just because we can easily verify what kind of programs other than sqlplus are hitting the database. Like TOAD, Golden, ACCESS, EXCEL, SQL/Server, etc., etc., etc. Of course we can look at listener logs, but if we're already going to do a trigger........ And you can turn logging off.

Larry

-----Original Message-----
From: Mercadante, Thomas F (LABOR)
[mailto:Thomas.Mercadante_at_labor.state.ny.us]
Sent: Tuesday, May 16, 2006 12:14 PM
To: Wolfson Larry - lwolfs; oracle-l_at_freelists.org Subject: RE: Security Message

Larry,

Just curious. What are you hoping to accomplish here? Why just audit sqlplus run on the server?

Tom

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org]

Sent: Tuesday, May 16, 2006 1:11 PM
To: Wolfson Larry - lwolfs; oracle-l_at_freelists.org Subject: RE: Security Message

BTW, didn't anyone else have a auditing/security department mandate this?

Larry

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Wolfson Larry -
lwolfs
Sent: Tuesday, May 16, 2006 10:45 AM
To: oracle-l_at_freelists.org
Subject: Security Message

One of our clients wants to put out a security message, like the one that shows up to a OS user, anytime someone runs sqlplus on a server.

2 years ago we suggested they use the glogin.sql code to provide this. They finally came back and asked us if we could implement it.

Now we're vacillating between that and using a login trigger to do it.
One advantage of the login trigger is we can identify what programs are actually being run against the database and from where.

Does anyone have a better suggestion or idea(s)?

	TIA
	Larry
************************************************************************

***
The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged.

If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.

If you have received this communication in error, please resend this communication to the sender and delete the original message or any copy of it from your computer system.

Thank You.

--
http://www.freelists.org/webpage/oracle-l
--
http://www.freelists.org/webpage/oracle-l
--
http://www.freelists.org/webpage/oracle-l

Received on Tue May 16 2006 - 12:20:43 CDT