I know Oracle 11gR2 default turn on some audit options:
- Code: Select all
select audit_option,user_name,success,failure
from dba_stmt_audit_opts
union
select privilege,user_name,success,failure
from dba_priv_audit_opts;SQL> SQL> 2 3 4 5
AUDIT_OPTION USER_NAME SUCCESS FAILURE
------------------------------ -------------------- ---------- ----------
ALTER ANY PROCEDURE BY ACCESS BY ACCESS
ALTER ANY TABLE BY ACCESS BY ACCESS
ALTER DATABASE BY ACCESS BY ACCESS
ALTER PROFILE BY ACCESS BY ACCESS
ALTER SYSTEM BY ACCESS BY ACCESS
ALTER USER BY ACCESS BY ACCESS
AUDIT SYSTEM BY ACCESS BY ACCESS
CREATE ANY JOB BY ACCESS BY ACCESS
CREATE ANY LIBRARY BY ACCESS BY ACCESS
CREATE ANY PROCEDURE BY ACCESS BY ACCESS
CREATE ANY TABLE BY ACCESS BY ACCESS
AUDIT_OPTION USER_NAME SUCCESS FAILURE
------------------------------ -------------------- ---------- ----------
CREATE EXTERNAL JOB BY ACCESS BY ACCESS
CREATE PUBLIC DATABASE LINK BY ACCESS BY ACCESS
CREATE SESSION BY ACCESS BY ACCESS
CREATE USER BY ACCESS BY ACCESS
DATABASE LINK BY ACCESS BY ACCESS
DROP ANY PROCEDURE BY ACCESS BY ACCESS
DROP ANY TABLE BY ACCESS BY ACCESS
DROP PROFILE BY ACCESS BY ACCESS
DROP USER BY ACCESS BY ACCESS
EXEMPT ACCESS POLICY BY ACCESS BY ACCESS
GRANT ANY OBJECT PRIVILEGE BY ACCESS BY ACCESS
AUDIT_OPTION USER_NAME SUCCESS FAILURE
------------------------------ -------------------- ---------- ----------
GRANT ANY PRIVILEGE BY ACCESS BY ACCESS
GRANT ANY ROLE BY ACCESS BY ACCESS
PROFILE BY ACCESS BY ACCESS
PUBLIC SYNONYM BY ACCESS BY ACCESS
ROLE BY ACCESS BY ACCESS
SYSTEM AUDIT BY ACCESS BY ACCESS
SYSTEM GRANT BY ACCESS BY ACCESS
29 rows selected.
I find that our EBs Database which running on Oracle 11.2.0.2 with "zero" row on the above output!
I want to know, is EBs have any reason to disable all the db audit ?
If I just want to know who login the schema, can I just enable one:
- Code: Select all
AUDIT_OPTION USER_NAME SUCCESS FAILURE
------------------------------ -------------------- ---------- ----------
CREATE SESSION BY ACCESS BY ACCESS
thanks.