在12C中，预定义了三种审计策略：ora_secureconfig,ora_database_parameter,ora_account_mgmt
可以通过脚本$ORACLE_HOME/rdbms/admin/secconf.sql脚本来创建这个三个预定义审计策略，并开启ora_secureconfig策略，另外两个不是默认开启。
ora_account_mgmt：审计用户账户和权限
ora_database_parameter：审计对数据库参数修改行为
ora_secureconfig：包含11g中的审计策略
SQL> select policy_name,audit_option from audit_unified_policies where policy_name in (‘ORA_ACCOUNT_MGMT‘,‘ORA_DATABASE_PARAMETER‘,‘ORA_SECURECONFIG‘); POLICY_NAME AUDIT_OPTION ------------------------------ ------------------------------ ORA_SECURECONFIG LOGMINING ORA_SECURECONFIG TRANSLATE ANY SQL ORA_SECURECONFIG EXEMPT REDACTION POLICY ORA_SECURECONFIG PURGE DBA_RECYCLEBIN ORA_SECURECONFIG ADMINISTER KEY MANAGEMENT ORA_SECURECONFIG DROP ANY SQL TRANSLATION PROFILE ORA_SECURECONFIG ALTER ANY SQL TRANSLATION PROFILE ORA_SECURECONFIG CREATE ANY SQL TRANSLATION PROFILE ORA_SECURECONFIG CREATE SQL TRANSLATION PROFILE ORA_SECURECONFIG CREATE EXTERNAL JOB ORA_SECURECONFIG CREATE ANY JOB ORA_SECURECONFIG GRANT ANY OBJECT PRIVILEGE ORA_SECURECONFIG EXEMPT ACCESS POLICY ORA_SECURECONFIG CREATE ANY LIBRARY ORA_SECURECONFIG GRANT ANY PRIVILEGE ORA_SECURECONFIG DROP ANY PROCEDURE ORA_SECURECONFIG ALTER ANY PROCEDURE ORA_SECURECONFIG CREATE ANY PROCEDURE ORA_SECURECONFIG ALTER DATABASE ORA_SECURECONFIG GRANT ANY ROLE ORA_SECURECONFIG DROP PUBLIC SYNONYM ORA_SECURECONFIG CREATE PUBLIC SYNONYM ORA_SECURECONFIG DROP ANY TABLE ORA_SECURECONFIG ALTER ANY TABLE ORA_SECURECONFIG CREATE ANY TABLE ORA_SECURECONFIG DROP USER ORA_SECURECONFIG CREATE USER ORA_SECURECONFIG AUDIT SYSTEM ORA_SECURECONFIG ALTER SYSTEM ORA_ACCOUNT_MGMT ALTER USER ORA_ACCOUNT_MGMT CREATE USER ORA_ACCOUNT_MGMT CREATE ROLE ORA_ACCOUNT_MGMT DROP USER ORA_ACCOUNT_MGMT DROP ROLE ORA_ACCOUNT_MGMT SET ROLE ORA_ACCOUNT_MGMT ALTER ROLE ORA_ACCOUNT_MGMT GRANT ORA_ACCOUNT_MGMT REVOKE ORA_DATABASE_PARAMETER ALTER DATABASE ORA_DATABASE_PARAMETER ALTER SYSTEM ORA_DATABASE_PARAMETER CREATE SPFILE ORA_SECURECONFIG CREATE DATABASE LINK ORA_SECURECONFIG DROP DATABASE LINK ORA_SECURECONFIG ALTER USER ORA_SECURECONFIG CREATE ROLE ORA_SECURECONFIG DROP ROLE ORA_SECURECONFIG SET ROLE ORA_SECURECONFIG CREATE PROFILE ORA_SECURECONFIG DROP PROFILE ORA_SECURECONFIG ALTER PROFILE ORA_SECURECONFIG ALTER ROLE ORA_SECURECONFIG CREATE DIRECTORY ORA_SECURECONFIG DROP DIRECTORY ORA_SECURECONFIG ALTER DATABASE LINK ORA_SECURECONFIG CREATE PLUGGABLE DATABASE ORA_SECURECONFIG ALTER PLUGGABLE DATABASE ORA_SECURECONFIG DROP PLUGGABLE DATABASE ORA_SECURECONFIG EXECUTE
时间： 2024-12-10 13:22:03