關於數據庫審計

(1)啓動審計
conn /as sysdba
show parameter audit_sys_operations;
alter syatem set audit_sys_operations=TRUE scope=spfile;
alter system set audit_trial=db scope=spfile;
(audit_trial還可定義爲os)
startup force
show parameter audit_sys_operations;
show parameter audit_trail;

(2)定義要審計的表
dbms_fga.add_policy(object_schema=>'bankuser',object_name=>'emp',policy_name=>'chk_emp',statement_types=>'insert,update,delete');
即對emp表的增刪改操作進行審計，由bankuser用戶完成，名稱爲chk_emp

(3)授權普通用戶查看審計表
grant select on dba_fga_audit_trail to bankuser;

(4)查詢審計結果
select t.timestamp,t.sql_text from sys.dba_fga_audit_trail t

(5)取消審計
execute dbms_fga.drop_policy(object_schema=>'bankuser',object_name=>'emp',policy_name=>'chk_emp');