Re: Protecting the encryption key from the DBA

From: <teraknowledgesystems_at_yahoo.com>
Date: 20 Jul 2005 00:32:12 -0700
Message-ID: <1121844732.703301.313980@g44g2000cwa.googlegroups.com>

Actually, to get you sweeting: here is how Oracle do the security checking:

    /* check the security and get the owner id number */     owner = kkpchk(name, KZSXPR, KZSCPR);

and here is how you bypass auditing (including Mother Fuckers like you, sys, ..)

#ifdef K_AUDIT

    {

      text   audopt[S_OPBL];                         /* auditing option

text */

      /* get the default auditing options relevent to procedures */
      aopgdo(&cd->kqlcdaop);
      aoptos(&cd->kqlcdaop, (char *)audopt);
      aopmsk((char *)audopt, KQDOBTPR);
      aopsto(&cd->kqlcdaop, (char *)audopt);
      K_MLSIF(df->kkpdflab = cd->kqlcdlab);        /* copy label

information */

    }
#endif

if you cannot understand it ask Bob Baldwin! I guess he is hairy enough for you?! Received on Wed Jul 20 2005 - 02:32:12 CDT