PCI-DSS标准之Oracle审计功能
Posted in idc机房监控 by admin on 11-01-2009.因为PCI-DSS审计的原因,需要在Oracle上面打开Audit功能。
sqlplus "/ as sysdba"
SQL*Plus: Release 10.2.0.3.0 - Production on Thu Jun 18 09:51:28 2009
Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Release 10.2.0.3.0 - 64bit Production
SQL> show parameter audit
NAME TYPE VALUE
------------------------- ----------- -----------------------
audit_file_dest string /data/SID/trace/adump
audit_sys_operations boolean FALSE
audit_syslog_level string
audit_trail string NONE
1.打开审计
SQL> alter system set audit_sys_operations=TRUE scope=spfile;
SQL> alter system set audit_trail=XML scope=spfile;
2.重启实例
3.SQL> show parameter audit
NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
audit_file_dest string /data/SID/trace/adump
audit_sys_operations boolean TRUE
audit_syslog_level string
audit_trail string XML
4.检查日志文件
在adump目录下的日志文件里面,可以看到你的操作都记录在案了。
Popularity: 54% [?]