Oracle审计功能的使用案例

审计功能这时候数据库是mount状态SQLgt; alter system set audit_file_dest=

审计功能
这时候数据库是mount状态
sql> alter system set audit_file_dest='/u01/gdrz/' scope=spfile;
（设置审计保存的目录）
system altered.
sql> alter system set audit_trail=db,extended scope=spfile;
system altered.
[oracle@bw ~]$ sqlplus / as sysdba
sql*plus: release 10.2.0.1.0 - production on sat apr 23 17:01:42 2011
copyright (c) 1982, 2005, oracle.  all rights reserved.
connected to:
oracle database 10genterprise edition release 10.2.0.1.0 - production
with the partitioning, olap and data mining options
sql> select username from dba_users;    （删除用户drop user xx cascade；）
username
------------------------------
outln
sys
system
bbww
dbsnmp
tsmsys
dip
7 rows selected.
sql> create user bb identified by oracle; （oracle指密码）
user created.
sql> create user ww identified by oracle;
user created.
sql> grant connect,resource to bb;     （给权限）
grant succeeded.
sql> grant connect,resource to ww;
grant succeeded.
sql> conn bb/oracle
connected.
sql> select * from tab;
no rows selected
sql> create table ctc ( name varchar2(10));
table created.
sql> select * from ctc;
no rows selected
sql> insert into ctc values ('hangzhou');
1 row created.
sql> commit;   （提交数据）
commit complete.
sql> select * from ctc;
name
----------
hangzhou
sql> show user;
user is "bb"
sql> grant select on ctc to ww;
grant succeeded.
sql> conn ww/oracle
connected.
sql> select * from bb.ctc;
name
----------
hangzhou
sql> conn / as sysdba
connected.
sql> show parameter audit
name                                 type        value
------------------------------------ ----------- ------------------------------
audit_file_dest                      string      /u01/bwaudit
audit_sys_operations                 boolean     false
audit_syslog_level                   string
audit_trail                          string      db, extended
sql> audit select on bb.ctc;
audit succeeded.
sql> conn ww/oracle
connected.
sql> select * from bb.ctc;
name
----------
hangzhou
sql> conn / as sysdba
connected.
sql> select username,sql_text from dba_audit_trail;
username
------------------------------
sql_text
--------------------------------------------------------------------------------
ww
select * from bb.ctc （审计产生的结果）