Question & Answer
Question
Does Guardium A-TAP make any changes to the Oracle executable on Linux ? - eg on Oracle Database Appliance (ODA)
Cause
Some clarification is needed on exactly what changes (if any) the A-TAP makes to the Oracle executable when the A-TAP is activated.
Example environment for a DB Server that is to be monitored by Guardium Software :-
- ODA version 12.1.2.1.0
- Oracle Linux 5.10 with Linux kernel 2.6.39-400.214.3.el5uek
Answer
ATAP activation does not make any changes to the Oracle executable on Linux.
A copy of the original oracle binary is made to a new file called oracle-guard-original, it then creates an executor called oracle which does an LD_PRELOAD of the A-TAP libraries (so that the Guardium modified functions are called) and executes the oracle-guard-original binary.
The Guardium functions basically send a copy of the Oracle database traffic to K-TAP before calling the original Oracle function that's replaced by the LD_PRELOAD.
Please note that this action is completely reversed when deactivating the A-TAP since the Guardium replaces the oracle executor it created with the oracle-guard-original.
Related Information
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21967840