Re: Interesting Exploit in PL/SQL

From: "Stefan Knecht" <knecht.stefan@xxxxxxxxx>
To: jkstill@xxxxxxxxx
Date: Fri, 1 Dec 2006 11:00:30 +0100

Well yeah, for the 'enable' procedure we do. But when we try to disable it,
and Oracle doesn't like that, we just don't care - because if it can't be
disabled, it couldn't have been enabled in the first place :)

Stefan

On 11/30/06, Jared Still <jkstill@xxxxxxxxx> wrote:


On 11/30/06, Jacques Kilchoer <Jacques.Kilchoer@xxxxxxxxx> wrote:
>
>  So if your procedure was only able to enable auditing on half the
> objects in the database, and failed to enable auditing on the other half,
> you didn't care? I guess in this case it would make sense. But then the
> other option would be to not run the procedure at all, if you didn't care
> which objects had auditing enabled.
>
>  ------------------------------
> **
>

IAC, I would think you would want a log of the errors.

--
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist

Follow-Ups:
- Re: Interesting Exploit in PL/SQL
  - From: Niall Litchfield

Re: Interesting Exploit in PL/SQL

Other related posts: