检查数据库安全

• 检查数据库安装目录, 数据目录, 归档目录, 备份目录等的属主, 读写权限等安全性；
  进入数据库的安装目录/opt/Kingbase/ES/V8

#cd /opt/Kingbase/ES/V8
#ls–l ./bin
-rw-r--r-- 1 kingbasekingbase 28538 May 15  2013 bin

• 检查数据库用户的权限设置, 密码组成等安全性配置；

select * from sys_user;
USENAME    | USESYSID | USECREATEDB | USECREATEROLE | USESUPER | USECATUPD |  PASSWD  | VALUNTIL | PASSEXPIRETIME | USECONFIG | TYPE
---------------+----------+-------------+---------------+----------+-----------+----------+----------+----------------+-----------+------
 SYSTEM        |       10 | t           | t             | D        | f         | ******** |          |                |           | S
 SYSSSO        |     9201 | f           | t             | S        | f         | ******** |          |                |           | S
 SYSSAO        |     9202 | f           | t             | A        | f         | ******** |          |                |           | S
 XIN           |    16390 | f           | f             | N        | f         | ******** |          |                |           | S
 DSA           |    24588 | f           | f             | N        | f         | ******** |          |                |           | S
 HLSJ_EMS      |    31313 | f           | f             | N        | f         | ******** |          |                |           | S
 BMC           |    32614 | f           | f             | N        | f         | ******** |          |                |           | S
 DCDM          |    32616 | f           | f             | N        | f         | ******** |          |                |           | S
 LOGMANAGEMENT |    32618 | f           | f             | N        | f         | ******** |          |                |           | S
 DCDW          |    33917 | f           | f             | N        | f         | ******** |          |                |           | S
(10 行)

• 检查用户修改密码

alter user DCDW with password 'dcdw';