Oracle 进程加固,ORACLE加固命令

---------回收PUBLIC权限----------------

REVOKE EXECUTE ON UTL_TCP FROM PUBLIC;

REVOKE EXECUTE ON UTL_HTTP FROM PUBLIC;

REVOKE EXECUTE ON UTL_SMTP FROM PUBLIC;

REVOKE EXECUTE ON UTL_INADDR FROM PUBLIC;

REVOKE EXECUTE ON CTX_DOC FROM PUBLIC;

REVOKE EXECUTE ON DBMS_EXPORT_EXTENSION FROM PUBLIC;

REVOKE EXECUTE ON DBMS_METADATA FROM PUBLIC;

REVOKE EXECUTE ON CTXSYS.DRILOAD FROM PUBLIC;

REVOKE EXECUTE ON DBMS_SQL FROM PUBLIC;

---------回收其它用户的权限------------

REVOKE ALTER ANY PROCEDURE FROM WMSYS;

REVOKE EXECUTE ANY PROCEDURE FROM WMSYS;

REVOKE CREATE ANY TRIGGER FROM WMSYS;

REVOKE CREATE ANY PROCEDURE FROM WMSYS;

REVOKE ALTER ANY TRIGGER FROM WMSYS;

REVOKE CREATE ANY TRIGGER FROM EXFSYS;

REVOKE CREATE ANY TRIGGER FROM MDSYS;

REVOKE CREATE ANY TRIGGER FROM OWBSYS;

REVOKE EXECUTE ANY PROCEDURE FROM OUTLN;

--------回收角色权限-----------------

REVOKE EXECUTE ANY PROCEDURE FROM IMP_FULL_DATABASE;

REVOKE EXECUTE ANY PROCEDURE FROM EXP_FULL_DATABASE;

REVOKE ALTER ANY PROCEDURE FROM IMP_FULL_DATABASE;

REVOKE CREATE ANY PROCEDURE FROM IMP_FULL_DATABASE;

REVOKE CREATE ANY TRIGGER FROM IMP_FULL_DATABASE;

REVOKE ALTER ANY TRIGGER FROM IMP_FULL_DATABASE;

--------重新赋予权限(针对普通用户需要赋予)-----------------DBMS_METDATAT获取元数据。

DBMS_SQL相关SQL

GRANT EXECUTE ON DBMS_METADATA TO EXFSYS;

GRANT EXECUTE ON DBMS_METADATA TO APEX_030200;

GRANT EXECUTE ON UTL_HTTP TO MDSYS;

GRANT EXECUTE ON DBMS_SQL TO EXFSYS;

GRANT EXECUTE ON DBMS_SQL TO APEX_030200;

GRANT EXECUTE ON DBMS_SQL TO CTXSYS;

GRANT EXECUTE ON DBMS_SQL TO MDSYS;

GRANT EXECUTE ON DBMS_SQL TO OLAPSYS;

GRANT EXECUTE ON DBMS_SQL TO SYSMAN;

GRANT EXECUTE ON DBMS_SQL TO SYSTEM;

GRANT EXECUTE ON DBMS_SQL TO WMSYS;

GRANT EXECUTE ON DBMS_SQL TO XDB;

GRANT EXECUTE ON CTX_DOC TO XDB;

-----------修改口令登录失败处理-----------

alter profile DEFAULT limit

failed_login_attempts 5

password_life_time 90

password_lock_time 1;

------------重新赋予普通用户EXP/IMP/EXPDP/IMPDP权限---------------

GRANT EXECUTE ON SYS.DBMS_EXPORT_EXTENSION TO GSS;

GRANT EXECUTE ON DBMS_METADATA TO GSS;

--------------------------粘贴截止-------------------------