oracle database security audit

Oracle auditing mechanism is used to monitor the operation of various users ORACLE database do.

By default, the audit function of the system is turned off. AUDIT_TRAIL can set parameters in the parameter file INIT.ORA to activate a positive integer.

After the audit function is activated, anyone with a table or view audit operation can be carried out as follows:

 Use SQL statements to select audit options;

 · Audit of the successful or unsuccessful attempt owned by the user table or view access;

 · There are various types of audit selected SQL operations (SELECT, UPDATE, INSERT, DELETE);

 · Control the extent of the audit (or is SESSION ACCESS units).

 

Under 8i

I want dml statements for a user to audit,

Proceed as follows:

1, or added AUDIT_TRAIL = DB audit_trail = db_extended In the init file

2,audit delete table,insert table,update table by zx;

Tip: audit has been successfully

3, SELECT * FROM DBA_STMT_AUDIT_OPTS; able to see a record

4, restart the database service, in order to test the user login, operation data

5. Check sys.aud $

 

create table agile.t(t number);

begin

dbms_fga.add_policy(

object_schema=>'AGILE',

object_name=>'T',

policy_name=>'T_INSERT',

audit_column=>'T',

statement_types=>'INSERT'

);

end;

SQL> insert i44o agile.t values(1);

1 row inserted

SQL> select * from dba_fga_audit_trail;

 

 

A complete audit :
a. Start Audit :
    1. System SET ALTER scope AUDIT_TRAIL = DB = SPFILE;
    2. the shutdown
    3. Startup
two. Setting Audit :
    Audit Update, INSERT
    ON dqsi.ac01
    by Access;
III. Modify data:
    Update AC01 SET aac003 = 'Zhaoqing Hui' where aac003 = 'John Doe';
    the commit;
    for a another machine:
    Update AC01 SET aac003 = 'Wang Wu' where aac003 = 'Zhaoqing Hui';
    the commit;
IV. View audit results:
    SQL> from the SELECT * DBA_AUDIT_TRAIL;

     OS_USERNAME                             
     -----------------------------------
     zhaoqh                                 
     Administrator  

 

Audit unsuccessful login, create table, drop table, modify table, drop table, and authorization.

noaudit all;

noaudit all privileges;

audit session whenever not successful;

audit create any table, delete any table, drop any table, alter any table by access ;

audit table by access ;

audit create user, alter user, drop user by access ;

audit grant table, grant procedure by access;

 

Undo all audit:

noaudit all;

noaudit all privileges;

 

Other random oracle of the document to see it! I will not help you search!

Guess you like

Origin www.cnblogs.com/fanweisheng/p/11113467.html