On Thursday 28 November 2002 03:53, O'Neill, Sean wrote: > We has a Standard Operating Procedure which states that whilst DBA's have a > access to data they will not change it. A recognition of the DBA's > capabilties but stating on paper company trust they will "behave" > themselves.
Auditors are usually bean counters (accountants). They don't trust anybody. > > On a more practical point with NT/W2K Oracle audit trail can be set to > write audit trail records to the event logs. DBA's can be prevented from > changing the event logs. So now it would take at least 2 people to > instigate a fraud. Hey this might foster even better relations between > DBA's and SA's ;) OS level audit trails won't track block level hacking, such as with BBED. Jared > > Just my 2 cent worth :) > ------------------------- > Se�n O' Neill > Organon (Ireland) Ltd. > [subscribed: digest mode] > > >> From: [EMAIL PROTECTED] > >> Date: Tue, 26 Nov 2002 14:40:24 -0800 > >> Subject: Oracle OS level security > >> > >>Dear list, > >> > >>Let me toss a hypothetical situation at you. > > etc. etc. > -------------------------------------------------------------------- > This message, including attached files, may contain confidential > information and is intended only for the use by the individual > and/or the entity to which it is addressed. Any unauthorized use, > dissemination of, or copying of the information contained herein is > not allowed and may lead to irreparable harm and damage for which > you may be held liable. If you receive this message in error or if > it is intended for someone else please notify the sender by > returning this e-mail immediately and delete the message. > -------------------------------------------------------------------- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Jared Still INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
