Fine-Grained Auditing test (精细审计：FGA测试)

最新推荐文章于 2022-01-05 21:24:37 发布

zhpsam109

最新推荐文章于 2022-01-05 21:24:37 发布

阅读量4.2k

点赞数

CC 4.0 BY-SA版权

分类专栏：数据库(Oracle/SQL Server) 文章标签：测试 sql object schema insert table

本文链接：https://blog.youkuaiyun.com/zhpsam109/article/details/1869912

数据库(Oracle/SQL Server) 专栏收录该内容

64 篇文章

订阅专栏

本文详细介绍了如何在Oracle数据库中使用细粒度审计（FGA）策略，包括创建表及插入数据、创建与启用FGA策略、执行更新操作、授予权限、查看审计轨迹以及禁用与删除策略等步骤。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1.create table and insert data

SQL> create table TEST
2 (
3 X NUMBER,
4 Y NUMBER
5 )
6 /

Table created

SQL> insert into test values(1,1);

1 row inserted

SQL> commit;

Commit complete

2.Creating an FGA Policy(disabled)

SQL> exec DBMS_FGA.ADD_POLICY(object_schema=>'LPPMTEST' ,object_name=>'TEST' ,policy_name=>'TEST_AUD' ,audit_column=>'X, Y' ,enable=>FALSE ,statement_types=>'UPDATE');

PL/SQL procedure successfully completed

3.Enabling an FGA Policy

SQL> exec DBMS_FGA.ENABLE_POLICY(object_schema=>'LPPMTEST' ,object_name=>'TEST' ,policy_name=>'TEST_AUD');

PL/SQL procedure successfully completed

4.execute update

SQL> update test set x=2,y=3;

1 row updated

SQL> commit;

Commit complete

5.grant privilege

SQL> conn sys/** as sysdba
Connected.

SQL> grant select on Dba_Fga_Audit_Trail to lppmtest;

Grant succeeded.

6.Reporting on the FGA Audit Trail Entries

SQL> SELECT session_id,TIMESTAMP,db_user,os_user,userhost,sql_text FROM Dba_Fga_Audit_Trail;

SESSION_ID TIMESTAMP DB_USER                 OS_USER                                                                   USERHOST                                                                 SQL_TEXT
---------- ----------- ------------------------------ -------------------------------------------------------------------------------- -------------------------------------------------------------------------------- --------------------------------------------------------------------------------
16202785 2007-11-6 1 LPPMTEST               H2                                                                             WORKGROUP/JACKY
                                                                                                                                                                                                                        update test set x=2,y=3

7.Disabling an FGA Policy

SQL> exec DBMS_FGA.DISABLE_POLICY(object_schema=>'LPPMTEST' ,object_name=>'TEST' ,policy_name=>'TEST_AUD');

PL/SQL procedure successfully completed

8.Dropping an FGA Policy

SQL> EXEC DBMS_FGA.DROP_POLICY(object_schema=>'LPPMTEST' ,object_name=>'TEST' ,policy_name=>'TEST_AUD');

PL/SQL procedure successfully completed

SQL>