Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 

This Can't Happen

By Steve Jones,

http://www.ladiesgadgets.com/wp-content/uploads/2009/06/16gb-usb-fingerprint-reader-flash-drive.jpgI was browsing through the Connect RSS feed recently and saw this item:SQL Server 2008 Auditing shutdown on error not working properly. It caught my eye since the changes to the auditing systems built into SQL Server 2008 seem to be well thought out and built to provide a robust, easy to use auditing process that satisfies requirements for many companies.

However if the auditing system can fill up, like with a USB device, and someone perform actions that aren't audited, that's a big deal.

But, Steve, why would anyone audit to a USB stick? I don't think they would, but I could easily see security groups auditing to a USB drive that they just "add" to a server and maintain physical access. If that's the case, and someone will do it, then as a BOFH, I can write a script to check the disk space on that device. When it's full, I can go ahead and run a few choice scripts on the server.

I'm sure this is a bug that will get fixed, but it seems like something that shouldn't have been overlooked in the first place.

Steve Jones


The Voice of the DBA Podcasts

Everyday Jones

The podcast feeds are available at sqlservercentral.mevio.com. Comments are definitely appreciated and wanted, and you can get feeds from there.

You can also follow Steve Jones on Twitter:

Overall RSS Feed: or now on iTunes!

Today's podcast features music by Everyday Jones. No relation, but I stumbled on to them and really like the music. Support this great duo at www.everydayjones.com.

 
Total article views: 139 | Views in the last 30 days: 1
 
Related Articles
ARTICLE

Auditing

For this Friday poll, Steve Jones asks about your auditing requirements.

FORUM

Audit

Audit

ARTICLE

Podcast Announcements

Podcast Feeds

FORUM

Podcast Problem

Podcast Problem Blocked by group policy

ARTICLE

Native Audits

This week Steve Jones asks if you're using the SQL Audit feature built into SQL Server.

Tags
auditing    
editorial    
 
Contribute