1.身份鉴别
(1)密码有效期:“select limit from dba_profiles where profile='DEFAULT' and resource_name='PASSWORD_LIFE_TIME';”
(2)密码失效后锁定时间:“select limit from dba_profiles where profile='DEFAULT' and resource_name='PASSWORD_REUSE_TIME';”
(3)失效后保留次数:“select limit from dba_profiles where profile='DEFAULT' and resource_name='PASSWORD_REUSE_MAX';”
(4)失效后密码保留时间:“select limit from dba_profiles where profile='DEFAULT' and resource_name='PASSWORD_GRACE_TIME';”
(5)复杂度:“select limit from dba_profiles where profile='DEFAULT' and resource_name='PASSWORD_VERIFY_FUNCTION';”
2.执行命令:“select username, account_status, profile from dba_users where account_status NOT like '%LOCKED';”查看未锁定的所有用户:
3.失败次数
1)执行命令:“select limit from dba_profiles where profile='DEFAULT' and resource_name='FAILED_LOGIN_ATTEMPTS';检查登录失败次数。
2)执行命令:“select limit from dba_profiles where profile='DEFAULT' and resource_name='PASSWORD_LOCK_TIME';“登录失败锁定时间:
3)执行命令:“SELECT LIMIT FROM DBA_PROFILES WHERE PROFILE='DEFAULT' AND RESOURCE_NAME='IDLE_TIME';”查询输出结果。若为’UNLIMITED’则无登录超时限制。
4.安全审计
1)执行命令:select value from v$parameter where name='audit_trail';检查是否开启审计。
2)执行命令:"show parameter audit_file_dest;"和“show parameter audit;”和检查审计数据存储路径。
5.执行命令:”select banner from sys.v_$version;“检查数据库版本。
执行密码复杂度校验脚本:@?/rdbms/admin/utlpwdmg.sql
oracle等保测评修改
最新推荐文章于 2024-07-29 11:25:44 发布