This forum is currently locked. You can't register or post questions at this time. (read more)

Oracle 11gR2 Default Audit Option VS EBs DB.

All posts relating to Oracle database administration.

Moderator: Tim...

peterx
Senior Member
Posts: 208
Joined: Wed Feb 09, 2011 7:07 am

Oracle 11gR2 Default Audit Option VS EBs DB.

Postby peterx » Mon Nov 19, 2012 2:51 am

hi Tim,

I know Oracle 11gR2 default turn on some audit options:

Code: Select all

select audit_option,user_name,success,failure
from dba_stmt_audit_opts
union
select privilege,user_name,success,failure
from dba_priv_audit_opts;SQL> SQL>   2    3    4    5 

AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
ALTER ANY PROCEDURE                                 BY ACCESS  BY ACCESS
ALTER ANY TABLE                                     BY ACCESS  BY ACCESS
ALTER DATABASE                                      BY ACCESS  BY ACCESS
ALTER PROFILE                                       BY ACCESS  BY ACCESS
ALTER SYSTEM                                        BY ACCESS  BY ACCESS
ALTER USER                                          BY ACCESS  BY ACCESS
AUDIT SYSTEM                                        BY ACCESS  BY ACCESS
CREATE ANY JOB                                      BY ACCESS  BY ACCESS
CREATE ANY LIBRARY                                  BY ACCESS  BY ACCESS
CREATE ANY PROCEDURE                                BY ACCESS  BY ACCESS
CREATE ANY TABLE                                    BY ACCESS  BY ACCESS

AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
CREATE EXTERNAL JOB                                 BY ACCESS  BY ACCESS
CREATE PUBLIC DATABASE LINK                         BY ACCESS  BY ACCESS
CREATE SESSION                                      BY ACCESS  BY ACCESS
CREATE USER                                         BY ACCESS  BY ACCESS
DATABASE LINK                                       BY ACCESS  BY ACCESS
DROP ANY PROCEDURE                                  BY ACCESS  BY ACCESS
DROP ANY TABLE                                      BY ACCESS  BY ACCESS
DROP PROFILE                                        BY ACCESS  BY ACCESS
DROP USER                                           BY ACCESS  BY ACCESS
EXEMPT ACCESS POLICY                                BY ACCESS  BY ACCESS
GRANT ANY OBJECT PRIVILEGE                          BY ACCESS  BY ACCESS

AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
GRANT ANY PRIVILEGE                                 BY ACCESS  BY ACCESS
GRANT ANY ROLE                                      BY ACCESS  BY ACCESS
PROFILE                                             BY ACCESS  BY ACCESS
PUBLIC SYNONYM                                      BY ACCESS  BY ACCESS
ROLE                                                BY ACCESS  BY ACCESS
SYSTEM AUDIT                                        BY ACCESS  BY ACCESS
SYSTEM GRANT                                        BY ACCESS  BY ACCESS

29 rows selected.


I find that our EBs Database which running on Oracle 11.2.0.2 with "zero" row on the above output!

I want to know, is EBs have any reason to disable all the db audit ?
If I just want to know who login the schema, can I just enable one:

Code: Select all

AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
CREATE SESSION                                      BY ACCESS  BY ACCESS



thanks.

Tim...
Site Admin
Posts: 18437
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK
Contact:

Re: Oracle 11gR2 Default Audit Option VS EBs DB.

Postby Tim... » Mon Nov 19, 2012 5:00 pm

Hi.

I don't know why they differ. Is it maybe that they were upgraded from an old version where this level of auditing was not present by default?

Regarding the second issue, that sounds OK to me.

Cheers

Tim...
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog


Return to “Oracle Database Administration”

Who is online

Users browsing this forum: No registered users and 0 guests

cron