Oracle 10g审计(audit)实验(三)
7 DEPT1 DROP TABLE
SCOTT SUN10G 20120914 23:06:26 RECOVER_TEST DROP TABLE
-------------审计结果存放在名为 AUD$ 的基表中，可以通过 DBA_AUDIT_TRAIL 视图查询
SQL> SELECT COUNT(*) FROM AUD$;
COUNT(*)
----------
7
SQL> DESC AUD$;
--------------删除审计结果
SQL> DELETE FROM AUD$;
7 ROWS DELETED.
SQL> COMMIT;
COMMIT COMPLETE.
--------------关闭审计
SQL> NOAUDIT TABLE;
NOAUDIT SUCCEEDED.
2、权限审计
SQL> AUDIT CREATE TABLE;
AUDIT SUCCEEDED.
SQL> AUDIT SELECT ANY TABLE, CREATE ANY TRIGGER;
AUDIT SUCCEEDED.
SQL> AUDIT SELECT ANY TABLE BY HR BY SESSION;
AUDIT SUCCEEDED.
SQL> CONN SCOTT/TIGER
CONNECTED.
SQL> SELECT TABLE_NAME FROM USER_TABLES;
TABLE_NAME
------------------------------------------------------------------------------------------
DEPT
EMP
BONUS
SALGRADE
EMP1
SQL> CREATE TABLE DEPT1 AS SELECT * FROM DEPT;
TABLE CREATED.
SQL> CONN / AS SYSDBA
CONNECTED.
-------- CREATE TABLE 操作审计
SQL> SELECT USERNAME,USERHOST,TIMESTAMP OBJ_NAME,ACTION_NAME FROM DBA_AUDIT_TRAIL;
USERNAME USERHOST OBJ_NAME ACTION_NAME
-------------------- -------------------- -------------------- ---------------
SCOTT SUN10G 2012-09-15 10:09:56 CREATE TABLE
3、对象审计
SQL> AUDIT ALL ON SCOTT.EMP;
AUDIT SUCCEEDED.
SQL> NOAUDIT ALL ON SCOTT.EMP;
NOAUDIT SUCCEEDED.
SQL> AUDIT ALL ON SCOTT.EMP1;
AUDIT SUCCEEDED.
SQL> CONN SCOTT/TIGER
CONNECTED.
SQL> COL ENAME FOR A20
SQL> SELECT * FROM EMP1;
EMPNO ENAME JOB MGR HIREDATE SAL COMM DEPTNO
---------- -------------------- --------------------------- ---------- ------------------- ---------- ---------- ----------
7369 SMITH CLERK 7902 1980-12-17 00:00:00 800 20
7499 ALLEN SALESMAN 7698 1981-02-20 00:00:00 1600 300 30
7521 WARD SALESMAN 7698 1981-02-22 00:00:00 1250 500 30
7566 JONES MANAGER 7839 1981-04-02 00:00:00 2975 20
7654 MARTIN SALESMAN 7698 1981-09-28 00:00:00 1250 1400 30
7698 BLAKE MANAGER 7839 1981-05-01 00:00:00 2850 30
7782 CLARK MANAGER 7839 1981-06-09 00:00:00 2450 10
7788 SCOTT ANALYST 7566 1987-04-19 00:00:00 3000 20
7839 KING PRESIDENT 1981-11-17 00:00:00 5000 10
7844 TURNER SALESMAN 7698 1981-09-08 00:00:00 1500 0 30
7876 ADAMS CLERK 7788 1987-05-23 00:00:00 1100 20
EMPNO ENAME JOB MGR HIREDATE SAL COMM DEPTNO
---------- -------------------- --------------------------- ---------- ------------------- ---------- ---------- ----------
7900 JAMES CLERK 7698 1981-12-03 00:00:00 950 30
7902 FORD ANALYST 7566 1981-12-0