TD Interview Question

How do you audit Linux/Oracle for user access controls? What would you test for post-system implementation?