Oracle10G 审计
SQL> conn / as sysdba;SQL> show parameter audit;NAME TYPE VALUE------------------------------------ ----------- ------------------------------audit_file_dest string /u01/app/oracle/admin/ORCL/adumpaudit_sys_operations boolean FALSEaudit_syslog_level stringaudit_trail string NONE#####//SQL> alter system set audit_sys_operations=TRUE scope=spfile; --审计管理用户(以sysdba/sysoper角色登陆)//俺不执行这句SQL> alter system set audit_trail=db,extended scope=spfile;SQL> startup force;SQL> show parameter audit;NAME TYPE VALUE------------------------------------ ----------- ------------------------------audit_file_dest string /u01/app/oracle/admin/ORCL/adumpaudit_sys_operations boolean TRUEaudit_syslog_level stringaudit_trail string DB, EXTENDED########开始审计SQL> conn / as sysdbaSQL> audit update table,insert table by pdm9;SQL> startup force;##查看审计SQL> select OS_USERNAME,username,USERHOST,TERMINAL,TIMESTAMP,OWNER,obj_name,ACTION_NAME,sessionid,os_process,sql_text from dba_audit_trail;##关闭审计SQL>alter system set audit_trail='FALSE' scope=spfile;SQL> startup force;入门文章：
http://www.securityfocus.com/infocus/1689
http://www.petefinnigan.com/
页:
[1]