RE: AUDIT question

From: Powell, Mark <mark.powell2_at_hp.com>
Date: Thu, 10 Nov 2011 18:57:05 +0000
Message-ID: <7C4BF3B32B80CC44AE37D31B172415937DCEBFEA9B_at_GVW1337EXC.americas.hpqcorp.net>

Do you really need to audit DBA users? What about auditing actions such as audit table, audit view, audit procedure, etc ... so all create table, alter table, and drop table etc... have an audit record created for the action.

You can also turn auditing on for user SYS activities.

Between the two features above you get a manageable but pretty decent record of DDL actions.

-----Original Message-----

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Bill Zakrzewski Sent: Thursday, November 10, 2011 10:17 AM To: oracle-l_at_freelists.org L
Subject: AUDIT question

Environment:

Oracle 9.2.0.8.0
HP-UX 11.11

We would like to audit all activities of the oracle users that have the DBA role granted. My initial thought was to create a logon trigger to check for the DBA role and turn auditing on for that particular session, but I do not believe that is an option. Any ideas?

Thanks,
Bill--
http://www.freelists.org/webpage/oracle-l

--

http://www.freelists.org/webpage/oracle-l Received on Thu Nov 10 2011 - 12:57:05 CST