<div>Michael,</div>
<div> </div>
<div>Thank you for the excellent suggestions. I will look into tripwire immediately. </div>
<div> </div>
<div>As for feeling the pain by the DBAs, that will take some time, thinking and discussion with the other admins. I would appreciate it if people could share their policies/procedures if they have them.</div>
<div> </div>
<div>Any other advice by you or others would be most welcomed.</div>
<div> </div>
<div> </div>
<div>Thank you,</div>
<div>Sharon<br><br> </div>
<div><span class="gmail_quote">On 8/20/06, <b class="gmail_sendername">Michael Tiernan</b> <<a href="mailto:michael.tiernan@gmail.com">michael.tiernan@gmail.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">On 8/20/06, Sharon Nagao <<a href="mailto:sharon.nagao@gmail.com">sharon.nagao@gmail.com</a>> wrote:
<br>> I was informed last week by my manager that the DBAs is to have full root<br>> access to all Dev and Test servers in our environment.<br>As quick as a bunny in hunting season I'd get tripwire running on the<br>
systems. You can skip doing MD5 sums for most of the files (it<br>consumes a lot of time and cycles) just a reality check of<br>permissions, ownership, change/modify/access times, and simple<br>checksum will leave you lots of breadcrumbs to follow.
<br><br>Second thing to do is to figure out how to get them to feel the pain<br>when something goes wrong (not that we're expecting this to<br>happen.....) Maybe devise a plan where any changes they've made have<br>to be reviewed and either approved or challenged. If it's challenged,
<br>they have to account for the reaons or switch it back. Make sure they<br>get paged for errors too. ;)<br>--<br> << MCT >> Michael C Tiernan.<br> Is God a performance artist?<br> EGO hack vivo quod ago accido.
<br><br>_______________________________________________<br>bblisa mailing list<br><a href="mailto:bblisa@bblisa.org">bblisa@bblisa.org</a><br><a href="http://www.bblisa.org/mailman/listinfo/bblisa">http://www.bblisa.org/mailman/listinfo/bblisa
</a><br></blockquote></div><br>