Re: is it possible to edit archivelog files?

Wijbrand Pauw wrote:

> You all know the expressions that one fool can ask more questions than 100
> wise man can answer, well than our security officer is a fool.....
>
> He now wants to know if it is possible to edit/change an archivelogfile
> and then apply it to an standby database.

Simplest of answers... tell him that the propability of that is the same as the propability of him getting that cute blonde in loans department into bed. ;-)

Anyone can edit an archive log. How successful that will be, is another question all together when that archive log is applied to the standby db.

Security in this context is not about protecting archive logs. It is about protecting the _access_ to archive logs. It is about protecting the _process_ used to apply the archive logs.

A truly secure system is a diskless computer, with no input devices, in a waterproof and bombproof vault, at the bottom of the ocean.

This is a basic and fundemental concept in security.. and one I would expect a security officer to know by heart.

--
Billy