Oracle 11g New Security Feature Audit_syslog_level

Sept. 6, 2009 - PRLog -- Hi friends,

Great new feature of Oracle 11g.

AUDIT_SYSLOG_LEVEL

Auditing Oracle software owner’s activities. It traces all events and commands of sysdba,sysoper privileges.Generaly SYS.AUD$ table contains auditing activities.But as Oracle software owner (SYSDBA owned) can easily remove auditing data from this SYS.AUD$
table.

This parameter also privent hacker activity if it captures password of oracle software owner.When AUDIT_SYSLOG_LEVEL and AUDIT_SYS_OPERATIONS are combined, any commands
run as user SYS may be audited using the syslog facility. Since the files used by syslog are owned by root, and a DBA usually does not have access to the root account, DBAs will not be able to remove traces of their activity. Of course, this also applies to intruders who have managed to break into a machine and have gained access to the account of the ORACLE software owner but not to the root account.

AUDIT_SYSLOG_LEVEL enables OS audit logs to be written to the system via the syslog utility, if the AUDIT_TRAIL parameter is set to os. The value of facility can be any of the following: USER, LOCAL0- LOCAL7, SYSLOG, DAEMON, KERN, MAIL, AUTH, LPR,NEWS, UUCP or CRON. The value of level can be any of the following: NOTICE, INFO,
DEBUG, WARNING, ERR, CRIT, ALERT, EMERG.

Offcourse certain commands are accepted by Oracle otherwise you will get ORA-32028: Syslog facility or level not recognized error at database start time.

Thanks and regards,
Gitesh Trivedi
http://www.dbametrix.com
http://www.dbametrix.com/remote-dba.html

# # #

We are highly experienced and expert Oracle DBA team and we are offering a range of Remote DBA support and Remote DBA services. We are also providing genuine OCP DBA training.
Our Remote DBA team is highly expertise in Tuning of databases. Our team is administrating database constantly and make proactive plan for future performance problem and optimizing database for existing resource usage for boosting up performance of database. Our Remote DBA services is proving fully guarantee of high optimizing performance of database.

DBAMETRIX’s Remote DBA services have Customizable support

Our Remote DBA services and Remote DBA support plans are depending on client’s requirement. We are offering very flexible and cost effective plans for client’s demand. Our Remote DBA support is customizable and totally depending on client’s enviroment and requirement. We offer variety of plans which will fit your budget.