Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Oracle audit settings
        
(Message started by: Pete Finnigan on Apr 19^th, 2006, 9:14am)

Title: Oracle audit settings
Post by Pete Finnigan on Apr 19^th, 2006, 9:14am

Hi,

I'm rather new to Oracle and the security settings.
I read some white papers regarding Oracle security on this website and other sites.

Is it true that if the audit_trail = FALSE that there is totally no auditing implemented on that Oracle database or do I oversee something?

Thanks in advance.

Best regards,

Bjorn

Kind regards,

Bjorn

Title: Re: Oracle audit settings
Post by Pete Finnigan on Apr 19^th, 2006, 11:30am

actually its is not as simple as that. There are always trace files created by default in $ORACLE_HOME/rdbms/audit or different location if its specified. These record logons as SYS and some small other list of actions.

Just turning on audit i.e. setting audit_trail=DB for instance does not generate audit either. You then need to specifiy some audit options to collect raw audit data.

Have a look at the paper I wrote, "An Introduction to Simple Oracle Auditing" which is available on my Oracle security white papers page (http://www.petefinnigan.com/orasec.htm)

hth

Pete