Re: Interesting Exploit in PL/SQL

  • From: "Stefan Knecht" <knecht.stefan@xxxxxxxxx>
  • To: jkstill@xxxxxxxxx
  • Date: Fri, 1 Dec 2006 11:00:30 +0100

Well yeah, for the 'enable' procedure we do. But when we try to disable it,
and Oracle doesn't like that, we just don't care - because if it can't be
disabled, it couldn't have been enabled in the first place :)


On 11/30/06, Jared Still <jkstill@xxxxxxxxx> wrote:

On 11/30/06, Jacques Kilchoer <Jacques.Kilchoer@xxxxxxxxx> wrote:
>  So if your procedure was only able to enable auditing on half the
> objects in the database, and failed to enable auditing on the other half,
> you didn't care? I guess in this case it would make sense. But then the
> other option would be to not run the procedure at all, if you didn't care
> which objects had auditing enabled.
>  ------------------------------
> **

IAC, I would think you would want a log of the errors.

Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist

Other related posts: