gazzag wrote:
> Chuck wrote:
>> Install and run oracle from an account that nobody has permissions to.
>> Allow read only access to other accounts for the audit files.
>
> Additionally, your DBA's should *not* be logging in using the Oracle
> O/S account. Create a login for each DBA and ensure it is in the "dba"
> group.
>
> HTH
>
> -g
>
"Shouldn't be" is the key phrase. Nobody should be using a shared
account. In fact I would also recommend disabling direct login to the
oracle account, give everyone their own personal account, and make then
su to oracle if they need to. That gives a clear audit trail from the
o/s perspective of who is doing what. Unless I am mistaken, this is
pretty standard fare under SarbOX.
Received on Mon May 08 2006 - 09:45:02 CDT
