zoukankan      html  css  js  c++  java
  • 安全-审核

    truncate table aud$;
    select * from aud$;
    select * from fga_log$;
    show parameter audit;

    alter system set audit_system_operations=true scope=spfile;
    alter system set audit_trail=DB,EXTENDED scope=spfile;

    noaudit select table by kyc_mer;
    noaudit select table,update table by kyc_mer whenever SUCCESSFUL;
    noaudit select table,update table by kyc_mer whenever not SUCCESSFUL;


    select * from dba_stmt_audit_opts;
    select * from dba_priv_audit_opts;
    select * from dba_obj_audit_opts;

    select * from dba_fga_audit_trail;
    select * from DBA_COMMON_AUDIT_TRAIL;
    select * from DBA_AUDIT_TRAIL;

    select * from dict;
    select * from dictionary
    where regexp_like(table_name,'AUDIT');
    select * from DBA_AUDIT_SESSION;
    select * from DBA_AUDIT_STATEMENT;
    select * from AUDIT_ACTIONS;


    select * from DBA_AUDIT_OBJECT
    select * from DBA_AUDIT_EXISTS

    select * from ALL_DEF_AUDIT_OPTS


    USER_AUDIT_POLICY_COLUMNS
    USER_AUDIT_POLICIES

    DBA_AUDIT_POLICY_COLUMNS
    DBA_AUDIT_POLICIES

    ALL_AUDIT_POLICY_COLUMNS
    ALL_AUDIT_POLICIES


    USER_OBJ_AUDIT_OPTS
    USER_AUDIT_TRAIL
    USER_AUDIT_STATEMENT
    USER_AUDIT_SESSION
    USER_AUDIT_OBJECT

    --------------------------------------

    dba_audit_trail ses_actions字段含义解释

    SES_ACTIONS 16个字符
    ---------S------

    ALTER, AUDIT, COMMENT, DELETE, GRANT, INDEX, INSERT, LOCK, RENAME, SELECT, UPDATE, REFERENCES, and EXECUTE
    Positions 14, 15, and 16 are
    reserved for future use. The characters are:
    - - None
    S - Success
    F - Failure
    B - Both

    --------------------------------------


    AUDIT ANY system privilege
    AUDIT SYSTEM system privilege


    DBA_AUDIT_STATEMENT displays audit trail records for
    all GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements in the database.

    select * from dba_audit_statement;
    grant connect to kyc_dev;
    revoke connect from kyc_dev;
    audit select on default;
    noaudit select on default;

    DBA_AUDIT_SESSION displays all audit trail records
    concerning CONNECT and DISCONNECT.


    这个好像不起作用
    DBA_AUDIT_EXISTS displays audit trail entries produced
    by AUDIT EXISTS and AUDIT NOT EXISTS.

    audit not exists;
    select * from dba_audit_exists;

  • 相关阅读:
    关于gc日志中Desired Survivor的疑问和对象晋升老年代的小结
    Tomcat 中部署 web 应用 ---- Dubbo 服务消费者 Web 应用 war 包的部署
    10种常见的排序算法
    让我们来谈谈JDBC
    单例的设计模式
    使用putty与SSHSecureShellClient登录远程服务器完成与本地Git项目的同步
    安装 Dubbo 管理控制台
    邮件工具类
    Hadoop系列教程<一>---Hadoop是什么呢?
    setTimeout闭包常见问题
  • 原文地址:https://www.cnblogs.com/createyuan/p/13937900.html
Copyright © 2011-2022 走看看