pdb lockdown简单尝试

lockdown的名字是分大小写的，paas和PAAS不是一个lockdown

08:00:19 SQL> create lockdown profile PAAS;

Lockdown Profile created.

Elapsed: 00:00:00.01

08:00:54 SQL> alter lockdown profile PAAS disable statement = ('alter system');

Lockdown Profile altered.

Elapsed: 00:00:00.00

08:01:33 SQL> alter system set pdb_lockdown='PAAS' scope=both;

System altered.

Elapsed: 00:00:00.05

08:02:26 SQL> select profile_name,rule_type,rule,status from dba_lockdown_profiles where profile_name='PAAS';

PROFILE_NAME	     RULE_TYPE		  RULE		       STATUS
-------------------- -------------------- -------------------- -------
PAAS		     STATEMENT		  ALTER SYSTEM	       DISABLE

Elapsed: 00:00:00.00

将lockdown设置后，我们看看lockdown是否生效了

08:03:04 SQL> alter session set container=vault4pdb1;

Session altered.

Elapsed: 00:00:00.01
08:03:41 SQL> alter system set sga_target=30g scope=both;
alter system set sga_target=30g scope=both
*
ERROR at line 1:
ORA-01031: insufficient privileges


Elapsed: 00:00:00.00

报没有权限是因为lockdown限制住了，我们把lockdown 打开再看看

08:03:54 SQL> alter session set container=cdb$root;

Session altered.

Elapsed: 00:00:00.00
08:04:34 SQL> alter lockdown profile PAAS enable statement = ('alter system');

Lockdown Profile altered.

Elapsed: 00:00:00.01
08:05:02 SQL> select profile_name,rule,rule_type,status from dba_lockdown_profiles where profile_name='PAAS';

PROFILE_NAME	     RULE		  RULE_TYPE	       STATUS
-------------------- -------------------- -------------------- -------
PAAS		     ALTER SYSTEM	  STATEMENT	       ENABLE

Elapsed: 00:00:00.01

08:06:08 SQL> alter session set container=vault4pdb1;

Session altered.

Elapsed: 00:00:00.01
08:06:21 SQL> alter system set sga_target=8g scope=spfile;

System altered.

Elapsed: 00:00:00.01
此处就不再报错了