Oracle Baselines and Java Internals
- From: Jared.Still@xxxxxxxxxxx
- To: oracle-l@xxxxxxxxxxxxx
- Date: Tue, 20 Jul 2004 14:04:49 -0700
List,
As part of the never ending SarbOx effort, I'm putting together a method
to get a
baseline of Oracle databases for auditing purposes.
My current criteria for this are as follows:
____
Track the following items in a separate database.
Structure of:
Tables
Indexes
Views
Contents of:
Triggers
Procedures
Functions
Packages
Java in the database
Track DDL_TIME, CREATION_DATE and TIMESTAMP for all objects.
Compute checksums for code objects.
----------
The section I'm unsure of is in regards to Java. I don't believe that
Oracle
actually stores all Java in the database. For instance, when you install
Java
in the database, my understanding is that the JVM resolves the location
of the classes to whatever lib is pointed to, much as a std JVM does.
In addition, Java source *may* be stored in the database, as seen by
select *
from dba_source
where type = 'JAVA SOURCE'
I need to be able to detect if changes were made in the database.
The timestamps in DBA_OBJECTS will let me know the last time an
object was touched, but that does not necessarily mean that the object
actually changed. It could have just been recompiled. Hence the
checksums.
If the Java is external ($OH/rdbms/jlib) , is is possible for the java
code to change
without modifying anything in the database. In this case, checking the
validity
of the code objects becomes a process external to Oracle.
Regarding Java, yes, my ignorance is showing, but I have not been able
to find any references that explains how Oracle resolves Java, and other
Oracle/Java internals.
Any insights into this are most welcome.
Thanks,
Jared
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Other related posts:
