I need some clarity in terms of Security involving Linux Admins and DBAs. Oracle DB on an Enterprise Linux server.
I want to ensure none of the contractor team be able to tamper database and its files(config, db and other imp files).
In order to do that I am looking for Security controls to restrict below two things.
- DBAs to not mess with database.
- ServerAdmins to not mess with important db files.
Now for the first point I am sure of having least privileges, custom db access, controlled access using LDAP groups.
However, for second part, I need suggestions on how linux sys admins can be restricted. Like disallowing folder access containing db files or something of that sort. Being said that they should also be able to do their required admin duties after applying security controls.
There are expensive DB and File monitoring solutions in market however I'm looking for native options. Please assist.