Oracle 11g數(shù)據(jù)庫默認(rèn)審計(jì)選項(xiàng)說明詳解
在Oracle 11g中默認(rèn)啟用審計(jì)選項(xiàng)，AUDIT_TRAIL參數(shù)的缺省值為DB，而在Oracle 10g中該參數(shù)默認(rèn)值為none，即不啟用審計(jì)。審計(jì)數(shù)據(jù)默認(rèn)存放SYSTEM 表空間下的AUD$審計(jì)字典基表上。Oracle官方宣稱默認(rèn)啟用的審計(jì)日志不會對絕大多數(shù)產(chǎn)品數(shù)據(jù)庫的性能帶來過大的負(fù)面影響，同時Oracle公司還推薦使用基于OS文件的審計(jì)日志記錄方式(OS audit trail files)。
注意在Oracle11g中CREATE SESSION將被作為受審計(jì)的權(quán)限來被記錄，因此當(dāng)SYSTEM表空間因磁盤空間而無法擴(kuò)展時將導(dǎo)致這部分審計(jì)記錄無法生成，這將最終導(dǎo)致普通用戶的新會話將無法正常創(chuàng)建，普通用戶將無法登陸數(shù)據(jù)庫。在這種場景中仍可以使用SYSDBA身份的用戶創(chuàng)建會話，在將審計(jì)數(shù)據(jù)合適備份后刪除一部分記錄，或者干脆TRUNCATE AUD$都可以解決上述問題。
當(dāng)AUDIT_TRAIL設(shè)置為OS時，審計(jì)記錄文件將在AUDIT_FILE_DEST參數(shù)所指定的目錄中生成。全部這些文件均可以隨時被刪除或復(fù)制。
注意在默認(rèn)情況下會以AUTOEXTEND ON自動擴(kuò)展選項(xiàng)創(chuàng)建SYSTEM表空間，因此系統(tǒng)表空間在必要情況下還是會自動增長的，我們所需注意的是磁盤上的剩余空間是否能夠滿足其增長需求，以及數(shù)據(jù)文件擴(kuò)展的上限，對于普通的8k smallfile表空間而言單個數(shù)據(jù)文件的最大尺寸是32G。
- SQL> select * from v$version whererownum=1;
- BANNER
- --------------------------------------------------------------------------------
- Oracle Database 11g Enterprise EditionRelease 11.2.0.1.0 - Production
以下權(quán)限將對所有用戶審計(jì)：
- DBA_PRIV_AUDIT_OPTS describescurrent system privileges being audited across the system and by user.
- SQL> select privilege,success,failurefrom dba_priv_audit_opts;
- PRIVILEGE SUCCESS FAILURE
- -------------------------------------------------- ----------
- CREATE EXTERNAL JOB BY ACCESS BY ACCESS
- CREATE ANY JOB BY ACCESS BY ACCESS
- GRANT ANY OBJECT PRIVILEGE BY ACCESS BY ACCESS
- EXEMPT ACCESS POLICY BY ACCESS BY ACCESS
- CREATE ANY LIBRARY BY ACCESS BY ACCESS
- GRANT ANY PRIVILEGE BY ACCESS BY ACCESS
- DROP PROFILE BY ACCESS BY ACCESS
- ALTER PROFILE BY ACCESS BY ACCESS
- DROP ANY PROCEDURE BY ACCESS BY ACCESS
- ALTER ANY PROCEDURE BY ACCESS BY ACCESS
- CREATE ANY PROCEDURE BY ACCESS BY ACCESS
- PRIVILEGE SUCCESS FAILURE
- -------------------------------------------------- ----------
- ALTER DATABASE BY ACCESS BY ACCESS
- GRANT ANY ROLE BY ACCESS BY ACCESS
- CREATE PUBLIC DATABASE LINK BY ACCESS BY ACCESS
- DROP ANY TABLE BY ACCESS BY ACCESS
- ALTER ANY TABLE BY ACCESS BY ACCESS
- CREATE ANY TABLE BY ACCESS BY ACCESS
- DROP USER BY ACCESS BY ACCESS
- ALTER USER BY ACCESS BY ACCESS
- CREATE USER BY ACCESS BY ACCESS
- CREATE SESSION BY ACCESS BY ACCESS
- AUDIT SYSTEM BY ACCESS BY ACCESS
- PRIVILEGE SUCCESS FAILURE
- -------------------------------------------------- ----------
- ALTER SYSTEM BY ACCESS BY ACCESS
- 23 rows selected.
- SQL>
以下語句也將對所有用戶審計(jì)：
- DBA_STMT_AUDIT_OPTS describescurrent system auditing options across the system and by user.
- SQL> select audit_option,success,failurefrom dba_stmt_audit_opts;
- AUDIT_OPTION SUCCESS FAILURE
- -------------------------------------------------- ----------
- ALTER SYSTEM BY ACCESS BY ACCESS
- SYSTEM AUDIT BY ACCESS BY ACCESS
- CREATE SESSION BY ACCESS BY ACCESS
- CREATE USER BY ACCESS BY ACCESS
- ALTER USER BY ACCESS BY ACCESS
- DROP USER BY ACCESS BY ACCESS
- PUBLIC SYNONYM BY ACCESS BY ACCESS
- DATABASE LINK BY ACCESS BY ACCESS
- ROLE BYACCESS BY ACCESS
- PROFILE BYACCESS BY ACCESS
- CREATE ANY TABLE BY ACCESS BY ACCESS
- AUDIT_OPTION SUCCESS FAILURE
- -------------------------------------------------- ----------
- ALTER ANY TABLE BY ACCESS BY ACCESS
- DROP ANY TABLE BY ACCESS BY ACCESS
- CREATE PUBLIC DATABASE LINK BY ACCESS BY ACCESS
- GRANT ANY ROLE BY ACCESS BY ACCESS
- SYSTEM GRANT BY ACCESS BY ACCESS
- ALTER DATABASE BY ACCESS BY ACCESS
- CREATE ANY PROCEDURE BY ACCESS BY ACCESS
- ALTER ANY PROCEDURE BY ACCESS BY ACCESS
- DROP ANY PROCEDURE BY ACCESS BY ACCESS
- ALTER PROFILE BY ACCESS BY ACCESS
- DROP PROFILE BY ACCESS BY ACCESS
- AUDIT_OPTION SUCCESS FAILURE
- -------------------------------------------------- ----------
- GRANT ANY PRIVILEGE BY ACCESS BY ACCESS
- CREATE ANY LIBRARY BY ACCESS BY ACCESS
- EXEMPT ACCESS POLICY BY ACCESS BY ACCESS
- GRANT ANY OBJECT PRIVILEGE BY ACCESS BY ACCESS
- CREATE ANY JOB BY ACCESS BY ACCESS
- CREATE EXTERNAL JOB BY ACCESS BY ACCESS
- 28 rows selected.
查詢當(dāng)前數(shù)據(jù)庫中的現(xiàn)有的審計(jì)記錄：
- DBA_AUDIT_TRAIL displaysall standard audit trail entries.
- SQL> select action_name,count(*) from dba_audit_trail group by action_name;
- ACTION_NAME COUNT(*)
- ---------------------------- ----------
- SYSTEM REVOKE 1
- LOGON 90
- DROP DATABASE LINK 5
- LOGOFF 59
- ALTER SYSTEM 5
- CREATE PUBLIC SYNONYM 2
- ALTER DATABASE 3
- DROP PUBLIC SYNONYM 2
- CREATE DATABASE LINK 5
- 9 rows selected.
關(guān)于Oracle 11g數(shù)據(jù)庫默認(rèn)審計(jì)選項(xiàng)說明的相關(guān)知識就介紹到這里了，希望本次的介紹能夠?qū)δ兴鶐椭?/p>
【編輯推薦】
分享到微信 
分享到微博
