Hi and thanks for reading,
I'm really new to oracle, I have an oracle database, and it needs to have a permanent log, not even the sys user should be able to modify it or disable it. I read all the docs I could find on google, and from here:
I learnt how I can prevent de sys user to modify the log by using AUDIT_TRAIL OS. Using OS value makes oracle write the log in a os file, in which the sys user does not have access. But it is required to avoid the sys user to disable the log, to prevent frauds even from the sysadmin that has the password for sys or system user. (If there is another way to prevent frauds from the sys admin, it is also welcome)
I have oracle 11g and there is no budget to buy anything else.