pete finnigan

Hi Brian,

You mention moving sys.aud$ to another tablespace, whilst this is common
sense Oracle no longer support doing this as some poor customer could
not recover when this had been done. I don't believe Oracle have changed
advice on this as yet. There is a note on Metalink about it. The
solution if it is moved is probably to switch audit off whilst
recovering. Jonathan discussed the following with me some time back:

<snip>
I haven't done any tests on the theory - it was just
a surmise that when the complainant was trying recovery,
they needed to recover the tablespace with the aud$ table
in it, but were running with audit on, so the recovery
processes couldn't log themselves until after the recovery
had completed.
</snip>

kind regards

Pete

--
Pete Finnigan
emailete@petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

daniel morgan

<all snipped>

This thread has nothing to do with misc and tools.

I have responded in c.d.o.server and suggest we try to move the
discussion there where it is on-topic.

--
Daniel Morgan
http://www.outreach.washington.edu/e...ad/oad_crs.asp
http://www.outreach.washington.edu/e...oa/aoa_crs.asp
damorgan@x.washington.edu
(replace 'x' with a 'u' to reply)