From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Mathew Brown" Subject: Using Linux Audit to Audit / Log All Oracle Related Activity Date: Mon, 17 Dec 2007 05:21:18 -0800 Message-ID: <1197897678.9239.1226981649@webmail.messagingengine.com> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Return-path: Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id lBHDLp3f015308 for ; Mon, 17 Dec 2007 08:21:52 -0500 Received: from out3.smtp.messagingengine.com (out3.smtp.messagingengine.com [66.111.4.27]) by mx3.redhat.com (8.13.1/8.13.1) with ESMTP id lBHDLOsX025715 for ; Mon, 17 Dec 2007 08:21:24 -0500 Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id D5CBA7E9FA for ; Mon, 17 Dec 2007 08:21:18 -0500 (EST) Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com Hi, I was wondering if the Linux Audit Daemon could be used to address the issue of Oracle auditing. Has anyone investigated this possibility? Ideally, I would like to audit all network (listener) as well as all local access (an Oracle DBA running sqlplus directly on the machine). Any ideas? Thanks for your help. -- Mathew Brown mathewbrown@fastmail.fm -- http://www.fastmail.fm - Or how I learned to stop worrying and love email again