I found an interesting post on the Oracle-l list last week about disabling writes to the Windows event log. Because I like undocumented or hidden or hard to find data I was immediately attracted to this post. The thread is called "disabling Oracle writes into NT event log" and the original poster said every time an archivelog is created an event is written to the event log in the same manner as an entry is written to the alert log.
The poster wanted to disable this write to the event log and found an undocumented parameter _disable_ntlog_events. You can test the default value of this parameter with my script check_parameter.sql. An example for my 9iR2 personal edition database is given next:
check_parameter: Release 1.0.0.0.0 - Production on Mon Dec 20 15:27:29 2004
Copyright (c) 2004 PeteFinnigan.com Limited. All rights reserved.
PARAMETER TO CHECK [utl_file_dir]: _disable_ntlog_events
CORRECT VALUE [null]: FALSE
OUTPUT METHOD Screen/File [S]: S
FILE NAME FOR OUTPUT [priv.lst]:
OUTPUT DIRECTORY [DIRECTORY or file (/tmp)]:
Investigating parameter => _disable_ntlog_events
====================================================================
Name : _disable_ntlog_events
Value : FALSE
Type : BOOLEAN
Is Default : DEFAULT VALUE
Is Session modifiable : FALSE
Is System modifiable : FALSE
Is Modified : FALSE
Is Adjusted : FALSE
Description : Disable logging to NT event log
Update Comment :
-------------------------------------------------------------------------
value is correct
PL/SQL procedure successfully completed.
For updates please visit /tools.htm
SQL>
The poster changed the value of this parameter with an ALTER SYSTEM command and checked it had been changed. He then noted that the events were still being written. His version was 10.1.0.2.0 on Windows XP. Niall Litchfield answered with information that he thought this bug was fixed in 10.1.0.3.
As I said at the start of this entry I found this interesting because it talks about internals, in this case an undocumented or underscore parameter.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Post about setting up and using autotrace"] [Next entry: "Sitemap generation tweaked"]
December 2004
- Another great recovery disk - This time a CD - 12/01/2004 by 12/01/2004
- Three great papers on shell codes and encoding and decoding - 12/02/2004 by 12/02/2004
- Next Edward Stangler post in the missing catpatch.sql series - 12/03/2004 by 12/03/2004
- Edwards next post in the series of catpatch.sql issues. - 12/04/2004 by 12/04/2004
- Ed's final post in the issues with not running catpatch.sql is there - 12/05/2004 by 12/05/2004
- SANS announces the new Securing Oracle training course - 12/06/2004 by 12/06/2004
- Mary Ann Davidson held a guru chat session at OOW - 12/07/2004 by 12/07/2004
- Oracle Database 10g Release 2 keynote at Oracle Open World - 12/08/2004 by 12/08/2004
- Frank has a good example of simple J2EE form based authentication for ADF UIX - 12/09/2004 by 12/09/2004
- Justin Kestelyn sums up Oracle Open World - 12/10/2004 by 12/10/2004
- News.com article : Finally, a sensible security scheme - 12/11/2004 by 12/11/2004
- Comments have been disabled from my weblog - 12/12/2004 by 12/12/2004
- A useful post on c.d.o.s about ADMIN_RESTRICTIONS_{listener_name} - 12/13/2004 by 12/13/2004
- Arup Nanda has a paper on Oracle Security Auditing part 1 on dbazine.com - 12/14/2004 by 12/14/2004
- Amis blog talks about SQuirrel - an open source database tool - 12/15/2004 by 12/15/2004
- Howard Rogers on dropping the DBA, CONNECT and RESOURCE roles - 12/16/2004 by 12/16/2004
- Tools page updated - 12/17/2004 by 12/17/2004
- Mark has found a good paper on programming Java in stored procedures - 12/18/2004 by 12/18/2004
- Post about setting up and using autotrace - 12/19/2004 by 12/19/2004
- Tools page updated - 12/20/2004 by 12/20/2004
- Database user account status's in SYS.USER_ASTATUS_MAP - 12/21/2004 by 12/21/2004
- SYS.USER_ASTATUS_MAP missing values solved - 12/22/2004 by 12/22/2004
- All the JDeveloper presentations from Oracle Open World - 12/23/2004 by 12/23/2004
- Web site statistics page added - 12/24/2004 by 12/24/2004
- Encrypting JDBC thin connections with SQL*Net - 12/27/2004 by 12/27/2004
- XML DB Beta program for Oracle 10g release 2 - 12/28/2004 by 12/28/2004
- Role based security management in Oracle designer - 12/29/2004 by 12/29/2004
- A free Perl based Log Analysis tool - 12/30/2004 by 12/30/2004
- Happy new year for 2005 - 12/31/2004 by 12/31/2004
Archives
Syndication
Powered by gm-rss 2.0.0
