ORACLE AUDIT_SYS_OPERATIONS 参数

最新推荐文章于 2023-08-11 17:36:06 发布

allway2

最新推荐文章于 2023-08-11 17:36:06 发布

阅读量2k

点赞数

本文链接：https://blog.csdn.net/allway2/article/details/90767486

版权

本文探讨了Oracle数据库中AUDIT_SYS_OPERATIONS参数的作用，该参数用于控制是否审计顶级操作，如直接由用户通过特定权限发出的SQL语句。详细介绍了参数的属性，包括类型、默认值、修改范围等，并指出在统一审计环境下，此参数设置将无效。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

AUDIT_SYS_OPERATIONS

Property	Description
Parameter type	Boolean
Default value	`TRUE`
Modifiable	No
Modifiable in a PDB	No
Range of values	`TRUE \| FALSE`
Basic	No

Note:

In an Oracle database that has migrated to unified auditing, the setting of this parameter has no effect.

See Oracle Database Security Guide for more information about unified auditing.
See Oracle Database Upgrade Guide for more information about migrating to unified auditing.

AUDIT_SYS_OPERATIONS enables or disables the auditing of top-level operations, which are SQL statements directly issued by users when connecting with the SYSASM, SYSBACKUP, SYSDBA, SYSDG, SYSKM, or SYSOPER privileges. (SQL statements run from within PL/SQL procedures or functions are not considered top-level.) The audit records are written to the operating system's audit trail. The audit records will be written in XML format if theAUDIT_TRAIL initialization parameter is set to xml or xml, extended.

On UNIX platforms, if the AUDIT_SYSLOG_LEVEL parameter has also been set, then it overrides the AUDIT_TRAIL parameter and SYS audit records are written to the system audit log using the SYSLOG utility.

In a CDB, the scope of the settings for this initialization parameter is the CDB. Although the audit trail is provided per PDB in a CDB, this initialization parameter cannot be configured for individual PDBs.