Oracle 11gR2 Default Audit Option VS EBs DB.

All posts relating to Oracle database administration.

Moderator: Tim...

Oracle 11gR2 Default Audit Option VS EBs DB.

Postby peterx » Mon Nov 19, 2012 2:51 am

hi Tim,

I know Oracle 11gR2 default turn on some audit options:

Code: Select all
select audit_option,user_name,success,failure
from dba_stmt_audit_opts
union
select privilege,user_name,success,failure
from dba_priv_audit_opts;SQL> SQL>   2    3    4    5 

AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
ALTER ANY PROCEDURE                                 BY ACCESS  BY ACCESS
ALTER ANY TABLE                                     BY ACCESS  BY ACCESS
ALTER DATABASE                                      BY ACCESS  BY ACCESS
ALTER PROFILE                                       BY ACCESS  BY ACCESS
ALTER SYSTEM                                        BY ACCESS  BY ACCESS
ALTER USER                                          BY ACCESS  BY ACCESS
AUDIT SYSTEM                                        BY ACCESS  BY ACCESS
CREATE ANY JOB                                      BY ACCESS  BY ACCESS
CREATE ANY LIBRARY                                  BY ACCESS  BY ACCESS
CREATE ANY PROCEDURE                                BY ACCESS  BY ACCESS
CREATE ANY TABLE                                    BY ACCESS  BY ACCESS

AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
CREATE EXTERNAL JOB                                 BY ACCESS  BY ACCESS
CREATE PUBLIC DATABASE LINK                         BY ACCESS  BY ACCESS
CREATE SESSION                                      BY ACCESS  BY ACCESS
CREATE USER                                         BY ACCESS  BY ACCESS
DATABASE LINK                                       BY ACCESS  BY ACCESS
DROP ANY PROCEDURE                                  BY ACCESS  BY ACCESS
DROP ANY TABLE                                      BY ACCESS  BY ACCESS
DROP PROFILE                                        BY ACCESS  BY ACCESS
DROP USER                                           BY ACCESS  BY ACCESS
EXEMPT ACCESS POLICY                                BY ACCESS  BY ACCESS
GRANT ANY OBJECT PRIVILEGE                          BY ACCESS  BY ACCESS

AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
GRANT ANY PRIVILEGE                                 BY ACCESS  BY ACCESS
GRANT ANY ROLE                                      BY ACCESS  BY ACCESS
PROFILE                                             BY ACCESS  BY ACCESS
PUBLIC SYNONYM                                      BY ACCESS  BY ACCESS
ROLE                                                BY ACCESS  BY ACCESS
SYSTEM AUDIT                                        BY ACCESS  BY ACCESS
SYSTEM GRANT                                        BY ACCESS  BY ACCESS

29 rows selected.


I find that our EBs Database which running on Oracle 11.2.0.2 with "zero" row on the above output!

I want to know, is EBs have any reason to disable all the db audit ?
If I just want to know who login the schema, can I just enable one:

Code: Select all
AUDIT_OPTION                   USER_NAME            SUCCESS    FAILURE
------------------------------ -------------------- ---------- ----------
CREATE SESSION                                      BY ACCESS  BY ACCESS



thanks.
peterx
Senior Member
 
Posts: 186
Joined: Wed Feb 09, 2011 7:07 am

Re: Oracle 11gR2 Default Audit Option VS EBs DB.

Postby Tim... » Mon Nov 19, 2012 5:00 pm

Hi.

I don't know why they differ. Is it maybe that they were upgraded from an old version where this level of auditing was not present by default?

Regarding the second issue, that sounds OK to me.

Cheers

Tim...
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog
Tim...
Site Admin
 
Posts: 17953
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK


Return to Oracle Database Administration

Who is online

Users browsing this forum: No registered users and 3 guests

cron