It just dumps the raw sql changes into /var/log by default. It's usually enough to backtrack changes if something goes squirrelly. We have a honeypot or two setup in the static groups that our level 2 people have access to. They look really juicy with things like "DO NOT MODIFY" in the name or software versions of things that aren't released to genpop. We tell them to leave things alone, but with change management and a few honeypots setup, we can verify that they actually are leaving things alone.
j
--
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436
