unix adminstrator & oracle administrator

[EAB]

Hi,
in our organization the unix administrator and oracle administrator is the same person,
so what is the risk from this 2 roles to be with the same person and how we can avoid splitting this 2 roles,
is there any audit log can be regulary check for that issue or , any tools can make this auditing to cover this audit comment

[harry d brown jr]

Is the Oracle Administrator a real Database Analyst or just an Administrator?

I'm not sure about the laws in the UAE, but here in the US we are faced with numerous laws regarding security, privacy, financial accountibility, ... Some additional laws target certain business sectors like Health Care, Financial Services and many more.

Even in the mid 1980's it was a seperate role.

live free or die
harry d brown jr

[Tony Scully_2]

If you literally only have one person to perform both roles, then there's not much you can do. If you go trusted you can keep audit logs of everything that happens on the system, there are also commercical products (Symark for eg) and probably open source equivalents that can provide logging down to keystoke level. If you have several people performing this dual role, then ensure you do the basics, like having them log on as themselves and then su to the oracle or root user when required, maybe use sudo for root etc. It's a difficult one where there are limited staff available.

Tony