1.Mixed Auditing PolicyHybrid audit mode supports the new audit engine and the old audit engine work together
Once the database has been upgraded, the existing audit settings are not affected. But the official proposal is to move to a unified audit model. After the database is created, the default is to use Mixed mode.
Before you decide to use unified auditing mode, you can use mixed mode to create an audit policy and then turn the policy on.
You can also use a policy that has already been created: Ora_secureconfig, ORA_ACCOUNT_MGMT, ora_database_parameter to turn on blending mode. After the database is created, the default is to use the Ora_secureconfig policy to turn on blending mode.
2.Unified Auditing Policy
To turn on unified audit mode, you need to relink. By default, the unified auditing model places the audit data in the Sysaux table space. You can also create a new tablespace to hold these read-only audit tables, where the owner is Audsys and the user is locked by default.
Once the unified audit mode is turned on, the old audit parameters are not valid. For example: Audit_trail, Audit_file_dest, Audit_sys_operations, Audit_syslog_level.
3. Open Unified Auditing Policy
3.1. Close all processes and database instances
3.2. Open
$ cd $ORACLE _home/rdbms/lib$ make-f ins_rdbms.mk uniaud_on Ioracle oracle_home= $ORACLE _home
$ cd $ORACLE _home/rdbms/lib$ make-f ins_rdbms.mk uniaud_on ioracle oracle_home= $ORACLE _home/usr/bin/ar d/u12/app/ ORACLE/PRODUCT/12.1.0/DBHOME_1/RDBMS/LIB/LIBKNLOPT.A Kzanang.o/usr/bin/ar cr/u12/app/oracle/product/12.1.0/ DBHOME_1/RDBMS/LIB/LIBKNLOPT.A/U12/APP/ORACLE/PRODUCT/12.1.0/DBHOME_1/RDBMS/LIB/KZAIANG.O chmod 755/u12/app/ Oracle/product/12.1.0/dbhome_1/bin-linking Oracle rm-f/u12/app/oracle/product/12.1.0/dbhome_1/rdbms/lib/oracle/ U12/app/oracle/product/12.1.0/dbhome_1/bin/orald-o/u12/app/oracle/product/12.1.0/dbhome_1/rdbms/lib/oracle-m64 -Z noexecstack-wl,--disable-new-dtags-l/u12/app/oracle/product/12.1.0/dbhome_1/rdbms/lib/-L/u12/app/oracle/ product/12.1.0/dbhome_1/lib/-l/u12/app/oracle/product/12.1.0/dbhome_1/lib/stubs/-wl,-e/u12/app/oracle/product/ 12.1.0/dbhome_1/rdbms/lib/opimai.o/u12/app/oracle/product/12.1.0/dbhome_1/rdbms/lib/ssoraed.o/u12/app/oracle/ PRODUCT/12.1.0/DBHOME_1/RDBMS/LIB/TTCSOI.O-WL,--whole-archive-lperfsrv12-wl,--no-whole-archive/u12/app/oracle/product/12.1.0/dbhome_1/lib/nautab.o/u12/app/oracle/product/12.1.0/dbhome_1/lib/naeet.o/u12/app/ oracle/product/12.1.0/dbhome_1/lib/naect.o/u12/app/oracle/product/12.1.0/dbhome_1/lib/naedhs.o/u12/app/oracle/ Product/12.1.0/dbhome_1/rdbms/lib/config.o-lserver12-lodm12-lcell12-lnnet12-lskgxp12-lsnls12-lnls12-lcore12-ls Nls12-lnls12-lcore12-lsnls12-lnls12-lxml12-lcore12-lunls12-lsnls12-lnls12-lcore12-lnls12-lclient12-lvsn12-l Common12-lgeneric12-lknlopt ' If/usr/bin/ar tv/u12/app/oracle/product/12.1.0/dbhome_1/rdbms/lib/libknlopt.a | grep xsyeolap.o >/dev/null 2>&1; Then echo "-LORAOLAP12"; Fi '-lskjcx12-lslax12-lpls12-lrt-lplp12-lserver12-lclient12-lvsn12-lcommon12-lgeneric12 ' if [-f/u12/app/oracl E/PRODUCT/12.1.0/DBHOME_1/LIB/LIBAVSERVER12.A]; Then echo "-lavserver12"; else echo "-LAVSTUB12"; Fi "if [-f/u12/app/oracle/product/12.1.0/dbhome_1/lib/libavclient12.a]; Then echo "-lavclient12"; Fi '-lknlopt-lslax12-LPLS12-LRT-LPLP12-LJAVAVM12-LSERVER12-LWWG ' Cat/u12/app/oracle/product/12.1.0/dbhome_1/lib/ldflags '-lncrypt12 -lnsgr12-lnzjs12-ln12-lnl12-lnro12 ' Cat/u12/app/oracle/product/12.1.0/dbhome_1/lib/ldflags '-lncrypt12-lnsgr12- Lnzjs12-ln12-lnl12-lnnzst12-lzt12-lztkg12-lmm-lsnls12-lnls12-lcore12-lsnls12-lnls12-lcore12-lsnls12-lnls12 -lxml12-lcore12-lunls12-lsnls12-lnls12-lcore12-lnls12-lztkg12 ' cat/u12/app/oracle/product/12.1.0/dbhome_1/lib/ Ldflags '-lncrypt12-lnsgr12-lnzjs12-ln12-lnl12-lnro12 ' cat/u12/app/oracle/product/12.1.0/dbhome_1/lib/ldflags ' -lncrypt12-lnsgr12-lnzjs12-ln12-lnl12-lnnzst12-lzt12-lztkg12-lsnls12-lnls12-lcore12-lsnls12-lnls12-lcore1 2-lsnls12-lnls12-lxml12-lcore12-lunls12-lsnls12-lnls12-lcore12-lnls12 ' If/usr/bin/ar tv/u12/app/oracle/product/ 12.1.0/DBHOME_1/RDBMS/LIB/LIBKNLOPT.A | grep "KXMNSD.O" >/dev/null 2>&1; then echo ""; else echo "-lordsdo12-lserver12"; Fi '-l/u12/app/oracle/product/12.1.0/dbhome_1/ctx/lib/-lctxc12-lctx12-lzx12-lgx12-lctx12-lzx12-lgx12-lordimt12-lclsra12- Ldbcfg12-lhasgen12-lskgxn2-lnnzst12-lzt12-lxml12-locr12-locrb12-locrutl12-lhasgen12-lskgxn2-lnnzst12-lzt12-lx Ml12-lgeneric12-loraz-llzopro-lorabz2-lipp_z-lipp_bz2-lippdcemerged-lippsemerged-lippdcmerged-lippsmerged-lip Pcore-lippcpemerged-lippcpmerged-lsnls12-lnls12-lcore12-lsnls12-lnls12-lcore12-lsnls12-lnls12-lxml12-lcore1 2-lunls12-lsnls12-lnls12-lcore12-lnls12-lsnls12-lunls12-lsnls12-lnls12-lcore12-lsnls12-lnls12-lcore12-lsnl S12-lnls12-lxml12-lcore12-lunls12-lsnls12-lnls12-lcore12-lnls12-lasmclnt12-lcommon12-lcore12-laio-lons ' C At/u12/app/oracle/product/12.1.0/dbhome_1/lib/sysliblist '-wl,-rpath,/u12/app/oracle/product/12.1.0/dbhome_1/ Lib-lm ' Cat/u12/app/oracle/product/12.1.0/dbhome_1/lib/sysliblist '-ldl-lm-l/u12/app/oracle/product/12.1.0/dbhom E_1/libtest! -f/u12/app/oracle/product/12.1.0/dbhome_1/bin/oracle | | Mv-f/U12/APP/ORACLE/PRODUCT/12.1.0/DBHOME_1/BIN/ORACLE/U12/APP/ORACLE/PRODUCT/12.1.0/DBHOME_1/BIN/ORACLEOMV/ U12/app/oracle/product/12.1.0/dbhome_1/rdbms/lib/oracle/u12/app/oracle/product/12.1.0/dbhome_1/bin/oraclechmod 6751/u12/app/oracle/product/12.1.0/dbhome_1/bin/oracle
4. Close Unified Auditing Policy
sql> noaudit policy ora_secureconfig; sql> noaudit policy ora_logon_failures;
...
Audit mode of 12C