Database Security Products (MOSC)

MOSC Banner

Some rows of AUD$ can not be deleted by another user than SYS (10.2.0.4)

edited Jun 20, 2018 2:08PM in Database Security Products (MOSC) 4 commentsAnswered ✓
Hello,

I granted 'select delete' on SYS.AUD$ to system, to be able to delete some of the rows. It works well except that the "DELETE sys.aud$ WHERE ..." commands themselves are stored in the table (action# 7) and can NOT be deleted if I don't use SYS account:

(under SYSTEM account:)
SELECT COUNT(*) FROM sys.aud$ WHERE ntimestamp# BETWEEN sysdate - 3 AND sysdate - 2 AND action# = 7 AND obj$name = 'AUD$';
  COUNT(*)
----------
       130
DELETE sys.aud$ WHERE ntimestamp# BETWEEN sysdate - 3 AND sysdate - 2 AND action# = 7 AND obj$name = 'AUD$';
0 rows deleted.

other example:

SELECT COUNT(*) FROM sys.aud$ WHERE ntimestamp# BETWEEN sysdate - 5 AND sysdate - 2;

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center