Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Oracle fine-grained audit (FGA)

2025-01-19 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Database >

Share

Shulou(Shulou.com)06/01 Report--

1 displays all dbms_fga processes:

Desc dbms_fga

2 add audit

Begin

Dbms_fga.add_policy (

Object_schema= > 'HR'

Object_name= > 'EMPLOYEES'

Policy_name= > 'AUDI_SAL_EMP'

Audit_condition= > 'salary is not null and commission_pct is not null'

Audit_column= > 'salary,commission_pct'

Enable= > true

Statement_types= > 'select')

End

3 delete audit

Begin

DBMS_FGA.DROP_POLICY (

Object_schema= > 'HR'

Object_name= > 'employees'

Policy_name= > 'audi_sal_emp')

End

4 View audit records

Select timestamp, db_user,os_user,object_schema,object_name,sql_text from dba_fga_audit_trail

Data dictionary view: important columns in DBA_FGA_AUDIT_TRAI L view

It records fine-grained access information. It shows the time stamp of the audit event, the querier's database user ID, the operating system user ID, the name and owner of the table used in the query, and finally the exact query statement.

SESSION_ID

Audit session identifier; different from the session identifier in the V$SESSION view

TIMESTAMP

The time stamp when the audit record was generated

DB_USER

The database user who issued the query

OS_USER

Operating system user

USERHOST

Hostname of the machine to which the user is connected

CLIENT_ID

Customer identifier (if set by a call to the packaging procedure dbms_session.set_identifier)

EXT_NAME

Externally authenticated customer name, such as LDAP user

OBJECT_SCHEMA

Access to the table triggered the audited table owner

OBJECT_NAME

The SELECT operation on the table triggered the name of the audited table

POLICY_NAME

The name of the policy that triggered the audit (if more than one policy is defined on the table, a record is inserted for each policy. In this case, the column shows which rows were inserted by which policy.)

SCN

The audited Oracle system change number is recorded.

SQL_TEXT

SQL statements submitted by the user

SQL_BIND

The binding variable used by the SQL statement, if present

5 list all audit strategies

Data dictionary view: important columns in DBA_AUDIT_POLICIES

Show all audit policies on the system

OBJECT_SCHEMA

The owner of the table or view for which the FGA policy is defined

OBJECT_NAME

The name of the table or view

POLICY_NAME

Name of the policy-for example, ACCOUNTS_ACCESS

POLICY_TEXT

Audit conditions specified when adding a policy-for example, BALANCE > = 11000

POLICY_COLUMN

Audit column-for example, BALANCE

ENABLED

YES if enabled, NO otherwise

PF_SCHEMA

Mode that owns the policy processor module (if any)

PF_PACKAGE

The package name of the processor module (if present)

PF_FUNCTION

The procedure name of the processor module (if present)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Database

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report