Trusted Facility Audit with User Mask on 10.00
Posted in 2013
Topics: Stored Procedures & SPL, Security, Permissions & Auditing
We have an old Informix version 10.00.FCx on HPUX 11iVx. I run Trusted
Facility auditing all the time on all of our many database engines, generally
using only the "_require" mask. We have a need to determine exactly what SPLs,
and tables a certain group of users are touching (they all run a specific and
complex application). The pertinent issue is that I defined a deep audit mask
for each user, but the audit mask is not working beyond the _require for any
of the 7 users I defined. A sample of the audit masks is shown below. I tested
the audit mask as _require on a development system to make sure I would get
the needed info - and that worked. I don't want to do that as _require on
production because of the volume of material - I really want just a selected
list of 7 users... Any thoughts on why this is not working correctly? The 7
users are still getting the "_require" mask, just not the more extensive list
by username. I created the user masks by writing a script:
onaudit -d -u kjones
onaudit -a -u kjones -e +OPDB
onaudit -m -u kjones -e +ACTB
onaudit -m -u kjones -e +ADCK
onaudit -m -u kjones -e +ADLG
onaudit -m -u kjones -e +ALFR
onaudit -m -u kjones -e +ALIX
onaudit -m -u kjones -e +ALME
onaudit -m -u kjones -e +ALOC
onaudit -m -u kjones -e +ALOP
onaudit -m -u kjones -e +ALTB
onaudit -m -u kjones -e -BGTX
onaudit -m -u kjones -e +CLDB
... etc
>onaudit -o
This will list every row in the audit mask table
Do you wish to continue? [y/N]: y
_default -
_exclude -
_require - ADCK,ADLG,ALIX,ALOP,ALTB,CLDB,CRAM,CRBS,CRDB,CRDS,CROP,
CRSN,CRSP,CRTR,CRVW,DNCK,DNDM,DRAM,DRBS,DRCK,DRDB,DRDS,DRIX,DRLG,DROP,DRSN,DRSP,
DRTR,DRVW,EXSP,GRDB,GRT
B,LGDB,MDLG,ONAU,ONCH,ONIN,ONLG,ONLO,ONMO,ONPA,ONSP,ONUL,OPDB,RLOP,RMCK,RNTC,RSO
P,RVDB,RVTB,SCSP,STCN,S
TDF,STEX,STSN,TMOP,UPAM,UPCK,UPDM,USSP,USTB,ALFR,STDS,STOM,STRT,GRFR,RVFR,CRRL,D
RRL,GRRL,RVRL,STDP,STSA
,ONMN,RNDB,ONBR,CRDM,DRDM,CRRT,DRRT,CRDT,CRCT,DRCT,CRBT,DRTY,CRME,DRME,ALME,CROC
,DROC,ALOC,STRS,STSC
kjones - ACTB,ADCK,ADLG,ALIX,ALOP,ALTB,CLDB,CRAM,CRBS,CRDB,CRDS,
CROP,CRSN,CRSP,CRTR,CRVW,DNCK,DNDM,DRAM,DRBS,DRCK,DRDB,DRDS,DRIX,DRLG,DROP,DRSN,
DRSP,DRTR,DRVW,EXSP,GRD
B,GRTB,LGDB,LKTB,MDLG,ONAU,ONCH,ONIN,ONLG,ONLO,ONMO,ONPA,ONSP,ONUL,OPDB,RDRW,RLO
P,RLTX,RMCK,RNTC,RSOP,R
VDB,RVTB,SCSP,STCN,STDF,STEX,STSN,TMOP,ULTB,UPAM,UPCK,UPDM,UPRW,USSP,USTB,ALFR,S
TDS,STOM,STRT,GRFR,RVFR
,CRRL,DRRL,GRRL,RVRL,STDP,STSA,ONMN,RNDB,ONBR,CRDM,DRDM,CRRT,DRRT,CRDT,CRCT,DRCT
,CRBT,DRTY,CRME,DRME,AL
ME,CROC,DROC,ALOC,STRS,STSC