12C pre-defined audit policies

Source: Internet
Author: User

In 12C, three audit strategies are pre-defined: ORA_SECURECONFIG,ORA_DATABASE_PARAMETER,ORA_ACCOUNT_MGMT
This three predefined audit policies can be created by scripting $oracle_home/rdbms/admin/secconf.sql scripts, and the Ora_secureconfig policy is turned on, and the other two are not enabled by default.


ORA_ACCOUNT_MGMT: Audit user accounts and permissions
Ora_database_parameter: Audit of database parameter modification behavior
Ora_secureconfig: Includes audit policy in 11g

Sql> Select Policy_name,audit_option from Audit_unified_policies where Policy_name in (' Ora_account_mgmt ', ' ORA_ Database_parameter ', ' ora_secureconfig ');               Policy_name audit_option------------------------------------------------------------ora_secureconfig Logminingora_secureconfig TRANSLATE any sqlora_secureconfig exempt redaction POLI Cyora_secureconfig PURGE dba_recyclebinora_secureconfig administer KEY Managementora_securecon FIG DROP any SQL translation profileora_secureconfig ALTER any SQL translation PROFILEORA_SECU Reconfig create any SQL translation profileora_secureconfig create SQL translation Profileora_               Secureconfig Create EXTERNAL jobora_secureconfig Create any Jobora_secureconfig GRANT any OBJECT privilegeora_secureconfig exempt ACCESS policyora_secureconfig CREATE Any libraryora_secureconfig GRANT any privilegeora_secureconfig DROP any Procedureora_securec Onfig ALTER any procedureora_secureconfig CREATE any procedureora_secureconfig A Lter databaseora_secureconfig GRANT any roleora_secureconfig DROP public synonymora_secureconf IG CREATE public synonymora_secureconfig DROP any tableora_secureconfig ALTER an               Y tableora_secureconfig CREATE any tableora_secureconfig DROP userora_secureconfig               CREATE userora_secureconfig AUDIT systemora_secureconfig ALTER systemora_account_mgmt               ALTER userora_account_mgmt Create userora_account_mgmt Create Roleora_account_mgmt               Drop userora_account_mgmt Drop ROLEORA_ACCOUNT_MGMT SET roleora_account_mgmt ALTER roleora_aCcount_mgmt grantora_account_mgmt revokeora_database_parameter ALTER databaseora_datab Ase_parameter ALTER systemora_database_parameter Create spfileora_secureconfig Create Databa               SE linkora_secureconfig DROP DATABASE linkora_secureconfig ALTER userora_secureconfig               CREATE roleora_secureconfig DROP roleora_secureconfig SET roleora_secureconfig                CREATE profileora_secureconfig DROP profileora_secureconfig ALTER profileora_secureconfig ALTER roleora_secureconfig CREATE directoryora_secureconfig DROP directoryora_s               Ecureconfig ALTER DATABASE linkora_secureconfig CREATE pluggable Databaseora_secureconfig ALTER pluggable databaseora_secureconfig DROP pluggable Databaseora_secureconfig EXE CUTE

12C pre-defined audit policies

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.