在oracle11g中,數(shù)據(jù)庫的審計功能是默認(rèn)開啟的(這和oracle10g的不一樣,10g默認(rèn)是關(guān)閉的),\x0d\x0aoracle11gR2的官方文檔上寫的是錯的,當(dāng)上說default是none,而且是審計到DB級別的,這樣就會\x0d\x0a往aud$表里記錄統(tǒng)計信息。\x0d\x0a \x0d\x0a1.如果審計不是必須的,可以關(guān)掉審計功能;\x0d\x0a\x0d\x0aSQL show parameter audit_trail;\x0d\x0a\x0d\x0aNAME TYPE VALUE\x0d\x0a------------------------------------ ----------- ------------------------------\x0d\x0aaudit_trail string DB\x0d\x0a\x0d\x0aSQL alter system set audit_trail=none scope=spfile;\x0d\x0aSQL shut immediate;\x0d\x0aSQLstartup\x0d\x0a2.刪除已有的審計信息\x0d\x0a可以直接truncate表aud$,\x0d\x0atruncate table SYS.AUD$;\x0d\x0a\x0d\x0a3.或者將aud$表移到另外一個表空間下,以減少system表空間的壓力和被撐爆的風(fēng)險。\x0d\x0a \x0d\x0a附:11g中有關(guān)audit_trail參數(shù)的設(shè)置說明:\x0d\x0aAUDIT_TRAIL\x0d\x0aProperty Description\x0d\x0aParameter type String\x0d\x0aSyntaxAUDIT_TRAIL = { none | os | db [, extended] | xml [, extended] }\x0d\x0aDefault valuenone\x0d\x0aModifiable No\x0d\x0aBasic No\x0d\x0aAUDIT_TRAIL enables or disables database auditing.\x0d\x0aValues:\x0d\x0anone\x0d\x0aDisables standard auditing. This value is the default if the AUDIT_TRAIL parameter was not set \x0d\x0ain the initialization parameter file or if you created the database using a method other than \x0d\x0aDatabase Configuration Assistant. If you created the database using Database Configuration \x0d\x0aAssistant, then the default is db.\x0d\x0aos\x0d\x0aDirects all audit records to an operating system file. Oracle recommends that you use the os \x0d\x0asetting, particularly if you are using an ultra-secure database configuration.\x0d\x0adb\x0d\x0aDirects audit records to the database audit trail (the SYS.AUD$ table), except for records \x0d\x0athat are always written to the operating system audit trail. Use this setting for a general \x0d\x0adatabase for manageability.\x0d\x0aIf the database was started in read-only mode with AUDIT_TRAIL set to db, then Oracle Database \x0d\x0ainternally sets AUDIT_TRAIL to os. Check the alert log for details.\x0d\x0adb, extended\x0d\x0aPerforms all actions of AUDIT_TRAIL=db, and also populates the SQL bind and SQL text CLOB-type \x0d\x0acolumns of the SYS.AUD$ table, when available. These two columns are populated only when this \x0d\x0aparameter is specified.\x0d\x0aIf the database was started in read-only mode with AUDIT_TRAIL set to db, extended, then Oracle \x0d\x0aDatabase internally sets AUDIT_TRAIL to os. Check the alert log for details.\x0d\x0axml\x0d\x0aWrites to the operating system audit record file in XML format. Records all elements of the \x0d\x0aAuditRecord node except Sql_Text and Sql_Bind to the operating system XML audit file.\x0d\x0axml, extended\x0d\x0aPerforms all actions of AUDIT_TRAIL=xml, and populates the SQL bind and SQL text CLOB-type columns\x0d\x0a of the SYS.AUD$ table, wherever possible. These columns are populated only when this parameter \x0d\x0ais specified.\x0d\x0aYou can use the SQL AUDIT statement to set auditing options regardless of the setting of this \x0d\x0aparameter.
創(chuàng)新互聯(lián)建站于2013年開始,是專業(yè)互聯(lián)網(wǎng)技術(shù)服務(wù)公司,擁有項目成都網(wǎng)站設(shè)計、成都網(wǎng)站制作網(wǎng)站策劃,項目實施與項目整合能力。我們以讓每一個夢想脫穎而出為使命,1280元措勤做網(wǎng)站,已為上家服務(wù),為措勤各地企業(yè)和個人服務(wù),聯(lián)系電話:13518219792
二、審計可以分為3類。
或者說,可以從3種角度去啟用審計。
1、語句審計(Statement Auditing)。
對預(yù)先指定的某些SQL語句進(jìn)行審計。這里從SQL語句的角度出發(fā),進(jìn)行指定。審計只關(guān)心執(zhí)行的語句。
例如,audit CREATE TABLE;命令,就表明對"create table"語句的執(zhí)行進(jìn)行記錄。 不管這語句是否是針對某個對象的操作
2、權(quán)限審計(Privilege Auditing)
對涉及某些權(quán)限的操作進(jìn)行審計。這里強(qiáng)調(diào)“涉及權(quán)限”
例如,audit CREATE TABLE;命令,又可以表明對涉及“CREATE TABLE”權(quán)限的操作進(jìn)行審計。
所以說,在這種命令的情況下,既產(chǎn)生一個語句審計,又產(chǎn)生了一個權(quán)限審計。
有時候“語句審計”和“敞氦搬教植寄邦犀鮑簍權(quán)限審計”的相互重復(fù)的。這一點可以后面證明。
3、對象審計(Object Auditing)。 記錄作用在指定對象上的操作。
aix平臺上,從 rac 環(huán)境 tar 過來的oracle軟件,直接解包到新機(jī)器上,目標(biāo)環(huán)境是單機(jī),則需要關(guān)閉 rac 選項。
1. Login as the Oracle software owner and shutdown all database instances on all nodes in the cluster.