Oracle数据库审计概述

针对SYSDBA的审计，Oracle提供了三种技术：1、数据库审计用户的使用的特权，执行的命令和访问的表，以及登录状态2、使用数据库触发器对发起基于值的审计；3、细粒度审计可以追踪到对表中哪些行进行了访问；当初始化参数文件AUDIT_SYS_OPERATIONS被设置为true时，SYSDBA和SYSOPER执行的语句将被记录到操作系统的审计文件中；标准审计在进行数据库审计前 AUDIT_TRAIL初始化参数文件需要被设置：

NONE:不执行审计
OS：审计文件被写入到操作系统中——the Application Log on windws, or the AUDIT_FILE_DEST directory on Uinx
DB：审计文件被写入到数据库的数据字典表中：SYS.AUD$
DB_EXTENDED
XML
XML_EXXTENDED

例：audit create any trigger; --审计所有创建触发器的操作auditselect any table by session;audit insert on scott.emp whenever successful;--还有一个选项是WHENEVER NOT SUCCESSFUL;audit allon scott.emp;audit session whenever not successful;--对用户登录进行审计； --查看系统产生的审计信息select * fromdba_audit_trail;其他产生的审计信息的视图还包括：DBA_AUDIT_OBJECT,DBA_AUDIT_STATEMENT, DBA_AUDIT_SESSION 使用触发器来对值进行审计A database trigger is a block of PL/SQL code that wil runautomaitcally whenever in INSERT, UPDATE, OR DELETE is executed against a table.例：CREATE ORREPLACE TRIGGER system.creditrating_auditAFTERUPDAT OF creditratingON scott.customersREFERENCINGNEW AS NEW OLD AS OLDFOR EACHROWBEGINIF :old.creditrationg！= :new.creditrating THENINSERT INTO system.creditrating_auditVALUES（sys_context（"userenv","os_user"）,sys_context（"userenv","ip_address"）,:new.customer_id || "credit rating changed from" || :old.creditrating ||" to " || :new.creditrating）;END IF;END;/ 细粒度审计Fine-Grained Auditing（FGA）FGA isconfigured with the package DBMS_FGA sql>execute dbms_fga.add_policy（-object_schema=>"HR",-object_name=>"EMPLOYEES",-policy_name=>"POL1",-audit_condition=>"department_id=80",-audit_column=>"SALARY"）; DBA_AUDIT_TRIALis used for standard database auditing;DBA_FGA_AUDIT_TRAIL:is used for fine-grained auditing;DBA_COMMON_AUDIT_TRAIL:is used for both;To seethe results of auditing with triggers, you must create your own views thataddress your own tables;Oracle数据库对象类型和列数据类型概述Oracle用户配置文件概述相关资讯 Oracle教程

Oracle中纯数字的varchar2类型和（07/29/2015 07:20:43）
Oracle教程：Oracle中查看DBLink密（07/29/2015 07:16:55）
[Oracle] SQL*Loader 详细使用教程（08/11/2013 21:30:36）

Oracle教程：Oracle中kill死锁进程（07/29/2015 07:18:28）
Oracle教程：ORA-25153 临时表空间（07/29/2015 07:13:37）
Oracle教程之管理安全和资源（04/08/2013 11:39:32）

本文评论查看全部评论（0）

表情：姓名：匿名字数

<div style="text-align: center;padding:20px;">
            <button class="layui-btn layui-bg-purple" id="dofav">收藏该网址</button>
        </div>
    </div>
</div>
<div class="copyright">
    <div id="footbar">
        版权所有©石家庄振强科技有限公司2024 <a href="https://beian.miit.gov.cn" target="_blank">冀ICP备08103738号-5</a> <a href="/storage/sitemap.xml">网站地图</a>
    </div>
</div>
<script> var _mtj = _mtj || [];
(function () {
    var mtj = document.createElement("script");
    mtj.src = "https://node12.aizhantj.com:21233/tjjs/?k=p2tceukth5c";
    var s = document.getElementsByTagName("script")[0];
    s.parentNode.insertBefore(mtj, s);
})(); </script>
<script src="/static/lib/layui/layui.js"></script>
<script src="/static/lib/jquery/jquery.js"></script>
<script src="/static/lib/ajax.js"></script>
<script>
    layui.use(function () {
        var layer = layui.layer;
        var $ = layui.jquery;
        $("#dofav").click(function () {
            var artid = $(".article").attr("artid");
            var params={
                artid:artid,
                addtype:'escdns_article',
                t:Math.random()
            };
            if(artid>0){
                ajax.request({
                    method: "/index/article/addfavorite", type: "post", callback: function (res) {
                        layer.msg(res.msg);
                    }
                },params);
            }
        })
    })
</script>
</body>
</html>