Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 

This Can't Happen

By Steve Jones,

http://www.ladiesgadgets.com/wp-content/uploads/2009/06/16gb-usb-fingerprint-reader-flash-drive.jpgI was browsing through the Connect RSS feed recently and saw this item:SQL Server 2008 Auditing shutdown on error not working properly. It caught my eye since the changes to the auditing systems built into SQL Server 2008 seem to be well thought out and built to provide a robust, easy to use auditing process that satisfies requirements for many companies.

However if the auditing system can fill up, like with a USB device, and someone perform actions that aren't audited, that's a big deal.

But, Steve, why would anyone audit to a USB stick? I don't think they would, but I could easily see security groups auditing to a USB drive that they just "add" to a server and maintain physical access. If that's the case, and someone will do it, then as a BOFH, I can write a script to check the disk space on that device. When it's full, I can go ahead and run a few choice scripts on the server.

I'm sure this is a bug that will get fixed, but it seems like something that shouldn't have been overlooked in the first place.

Steve Jones


The Voice of the DBA Podcasts

Everyday Jones

The podcast feeds are available at sqlservercentral.mevio.com. Comments are definitely appreciated and wanted, and you can get feeds from there.

You can also follow Steve Jones on Twitter:

Overall RSS Feed: or now on iTunes!

Today's podcast features music by Everyday Jones. No relation, but I stumbled on to them and really like the music. Support this great duo at www.everydayjones.com.

Total article views: 139 | Views in the last 30 days: 1
 
Related Articles
ARTICLE

Auditing

For this Friday poll, Steve Jones asks about your auditing requirements.

FORUM

Audit

Audit

ARTICLE

Podcast Announcements

Podcast Feeds

FORUM

Podcast Problem

Podcast Problem Blocked by group policy

BLOG

Podcasting

A new video setup is on the way!!!! Actually I'll do a couple podcasts on podcasting over the hol...

Tags
auditing    
editorial    
 
Contribute

Join the most active online SQL Server Community

SQL knowledge, delivered daily, free:

Email address:  

You make SSC a better place

As a member of SQLServerCentral, you get free access to loads of fresh content: thousands of articles and SQL scripts, a library of free eBooks, a weekly database news roundup, a great Q & A platform… And it’s our huge, buzzing community of SQL Server Professionals that makes it such a success.

Join us!

Steve Jones
Editor, SQLServerCentral.com

Already a member? Jump in:

Email address:   Password:   Remember me: Forgotten your password?
Steve Jones