Re: Auditing DBAs

Howard J. Rogers wrote:

> I presumably missed the bit where everyone posted the fact that in 9i
> Release 2, auditing SYS operations is a piece of cake, and requires
> the setting of one init.ora/spfile parameter.

I did.

> Audit_sys_operations=true is your friend.
>
> It requires that you set the directory where the SYS audit trail is
> written to, and that requires in turn that you set appropriate O/S
> permissions on that directory so that Mr. DBA doesn't just waltz in to
> the directory and delete the audit trail. But nothing a moderately
> competent Unix administrator couldn't cope with, I suspect.
>
> Regards
> HJR

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace 'x' with 'u' to respond)