Ich hatte schon öfters die Anforderung, auf Statement-Ebene Auditing einzuschalten. Also z.B. in einem Logon-Trigger die Umgebung des Users abzuchecken und anhand dessen zu entscheiden, ob Auditing notwendig ist oder nicht.
Oracle sieht dies aber nicht so vor. Es ist nur auf Schema-Ebene definierbar. Viele denken zwar, die Option “BY SESSION” macht dies, aber diese Option [...]
Archive of posts filed under the TrivadisContent category.
Oracle: Auditing auf Statement-Ebene einschalten
Status Oracle Security Bugs (Oracle Database Vault)
In the current Oracle Critical Patch Update (April 2009) all our Security Bugs are solved, as well in Oracle Database version 11.1.0.7.
Starting from now, I can recommend Database Vault.
But please read the documentation carefully. Database Vault does not help for all security requirements (e.g. encryption).
Learn more about Database Vault – and which options you need [...]
Oracle Database 11g Release 1 11.1.0.7 – new features
First chapter in the Patch Set Notes:
…
Patch sets provide bug fixes only; they do not include new functionality and they do not require certification on the target system.
…
This is so not true
There is at least one new feature: a new package called DBMS_AUDIT_MGMT.
This should be mainly used with Oracle Audit Vault. But [...]
Oracle Database 11g Release 1 11.1.0.7 for Linux 32-bit and 64-bit available
The first patchset for Oracle Database 11g is available.
File size (Linux 32 bit): 1.5 GB!!! Happy download
MySQL plug-in for Oracle Grid Control
For quite some time I have been trying to persuade my colleagues to write a MySQL plug-in for Oracle Grid Control. Without success…
But now an official plug-in is available, created by Alex Gorbachev (Pythian Group). It can be downloaded from the “Oracle Enterprise Manager 10g Grid Control
Extensions Exchange” page too – and it is [...]
Oracle Critical Patch Update April 2008 – First Tests
During the last days we have tested the CPU very intensively.
Some information about it:
I recommend applying it, if you use Oracle Application Express (APEX) 3.0. Because on iDefense it is described, how easy a security hole can vulnerable.
You can upgrade to APEX 3.1 too.
This is the first CPU without need for a newer version of [...]
Oracle Database Vault 10g Release 2 (10.2.0.4.0)
After the x86-Linux and the 32-bit Windows version now the x84-64bit Linux version is ready for download.
For more information see here.
Oracle Critical Patch Update April 2008: Pre-Release Advisory
Here is the first information about the next CPU.
Database:
This CPU contains 17 new security fixes (including 2 for Oracle Application Express)
The highest CVSS base score of vulnerabilities is 6.6. This is regarded as a high risk.
Some very critical components are affected:
Audit
Authentication
Core RDBMS
Data Pump
Export
Oracle Net Services
Query Optimizer
…
This CPU includes fixes for Oracle Database 11g too.
Oracle [...]
Oracle 10.2.0.4 is available for Linux x64_64 too…
After the 32Bit version now the 64bit version is ready for download.
I read on Laurents Blog , that the unix versions will be arriving at the earliest in the 3 week of April. This will be very late…
OCP Certification “Oracle database 11g: New features for administrators”
After Laurent wrote in his blog , that the update exam for the OCP 11g is available from the 18/02/2008, I want to try it. OK – I didn’t do this on the first day, but the 03.03. is not so late…
Today in the morning I took the exam and I passed the test.
Some [...]
English