安全-审核

truncate table aud$;
select * from aud$;
select * from fga_log$;
show parameter audit;

alter system set audit_system_operations=true scope=spfile;
alter system set audit_trail=DB,EXTENDED scope=spfile;

 

noaudit select table by kyc_mer;
noaudit select table,update table by kyc_mer whenever SUCCESSFUL;
noaudit select table,update table by kyc_mer whenever not SUCCESSFUL;

 

select * from dba_stmt_audit_opts;
select * from dba_priv_audit_opts;
select * from dba_obj_audit_opts;

select * from dba_fga_audit_trail;
select * from DBA_COMMON_AUDIT_TRAIL;
select * from DBA_AUDIT_TRAIL;

 

select * from dict;
select * from dictionary
where regexp_like(table_name,'AUDIT');
select * from DBA_AUDIT_SESSION;
select * from DBA_AUDIT_STATEMENT;
select * from AUDIT_ACTIONS;

select * from DBA_AUDIT_OBJECT
select * from DBA_AUDIT_EXISTS

select * from ALL_DEF_AUDIT_OPTS

USER_AUDIT_POLICY_COLUMNS
USER_AUDIT_POLICIES

DBA_AUDIT_POLICY_COLUMNS
DBA_AUDIT_POLICIES

ALL_AUDIT_POLICY_COLUMNS
ALL_AUDIT_POLICIES

USER_OBJ_AUDIT_OPTS
USER_AUDIT_TRAIL
USER_AUDIT_STATEMENT
USER_AUDIT_SESSION
USER_AUDIT_OBJECT

 

--------------------------------------

dba_audit_trail ses_actions字段含义解释

SES_ACTIONS 16个字符
---------S------

ALTER, AUDIT, COMMENT, DELETE, GRANT, INDEX, INSERT, LOCK, RENAME, SELECT, UPDATE, REFERENCES, and EXECUTE
Positions 14, 15, and 16 are
reserved for future use. The characters are:
- - None
S - Success
F - Failure
B - Both

 

--------------------------------------

AUDIT ANY system privilege
AUDIT SYSTEM system privilege

DBA_AUDIT_STATEMENT displays audit trail records for
all GRANT, REVOKE, AUDIT, NOAUDIT, and ALTER SYSTEM statements in the database.

select * from dba_audit_statement;
grant connect to kyc_dev;
revoke connect from kyc_dev;
audit select on default;
noaudit select on default;

 

DBA_AUDIT_SESSION displays all audit trail records
concerning CONNECT and DISCONNECT.

这个好像不起作用
DBA_AUDIT_EXISTS displays audit trail entries produced
by AUDIT EXISTS and AUDIT NOT EXISTS.

audit not exists;
select * from dba_audit_exists;