IBM Security Guardium

 View Only
Expand all | Collapse all

How can I exclude Oracle schemas in a Policy rule ?

  • 1.  How can I exclude Oracle schemas in a Policy rule ?

    Posted Tue May 25, 2021 10:04 AM
    Hi,

    I'm searching a way to exclude a group of Oracle schemas in a Policy Rule (by using Guardium group "Excluded Classification schemas - Oracle").
    My goal : for sys/system oracle users connections, I want to log SQL except SQL requests made on tables belonging to this group of schemas.

    I wanted to use Guardium group "Excluded Classification schemas - Oracle" in SQL criteria, but SQL criteria doesn't include schema parameter.

    Thanks for your help !

    Best regards,
    Stéphanie.

    ------------------------------
    Stephanie JOURDAIN
    ------------------------------


  • 2.  RE: How can I exclude Oracle schemas in a Policy rule ?

    Posted Wed May 26, 2021 03:33 AM

    Hi Stephanie,
    Would you like exclude set of schemas from monitoring or from classification policy?

    I assume first situation.

    Oracle object reference has syntax "schema.table" so you can exclude some schemas using OBJECT field in the policy and provide definition using wild character:

    schema1.%, schema2.%,...., schemaN.%

    Nevertheless this will work if SQL commands use fully qualified object name. There is no possibilty to deduct what is the schema scope if SQL contains only reference to the table.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------

    Original Message