RE: DBA_STMT_AUDIT_OPTS versus DBA_PRIV_AUDIT_OPTS and SELECT ANY TABLE (Confused)
- From: Don Granaman <DonGranaman@xxxxxxxxxxxxxxx>
- To: "Christopher.Taylor2@xxxxxxxxxxxx" <Christopher.Taylor2@xxxxxxxxxxxx>, "oracle-l@xxxxxxxxxxxxx" <oracle-l@xxxxxxxxxxxxx>
- Date: Tue, 12 Mar 2013 09:28:43 -0500
Are the unsuccessful selects being audited are being audited via "audit not
exists"? Are successful selects from users without the SELECT ANY TABLE
privilege also audited?
Don Granaman | Ph: 402-361-3073 | Cell: 402-960-6955 | Solutionary - Relevant
| Intelligent | Security
-----Original Message-----
From: Christopher.Taylor2@xxxxxxxxxxxx
[mailto:Christopher.Taylor2@xxxxxxxxxxxx]
Sent: Monday, March 11, 2013 12:32 PM
To: Don Granaman; oracle-l@xxxxxxxxxxxxx
Subject: RE: DBA_STMT_AUDIT_OPTS versus DBA_PRIV_AUDIT_OPTS and SELECT ANY
TABLE (Confused)
It's strange - I'm getting audit records for unsuccessful SELECTS and its from
users that do not have SELECT ANY TABLE nor is there auditing turned on at the
object layer.
I wonder what AUDIT is enabling the SELECT auditing in that case - any ideas?
Chris
-----Original Message-----
From: Don Granaman [mailto:DonGranaman@xxxxxxxxxxxxxxx]
Sent: Monday, March 11, 2013 12:21 PM
To: Taylor Christopher - Nashville; oracle-l@xxxxxxxxxxxxx
Subject: RE: DBA_STMT_AUDIT_OPTS versus DBA_PRIV_AUDIT_OPTS and SELECT ANY
TABLE (Confused)
Actually, almost all privilege and statement auditing shows up in both views.
(I have no idea why though.) The only auditing initiated by "audit select any
table" is auditing the use of the 'SELECT ANY TABLE" system privilege. It does
NOT mean that selects are being audited against all tables, even for users
without this system privilege.
Don Granaman | Ph: 402-361-3073 | Cell: 402-960-6955 | Solutionary - Relevant
| Intelligent | Security
--
//www.freelists.org/webpage/oracle-l
Other related posts: