Little Star Blog

打开审计攻击 查看当前审计状态 sp_configure 'auditing' 打开审计 第一步、先初始化审计设备 disk init name = "auditdev", physname = "/opt/sybase/data/c2d0s4", size = "100M" disk init name = "auditlogdev", physname = "/opt/sybase/data/c2d0s5", size = "200M" create database sybsecurity on auditdev log on auditlogdev 第二步、执行审计

查看插件 select name from pg_available_extensions; 查看pgaudit设置 select name,setting from pg_settings where name ~ 'pgaudit'; set pgaudit.log = 'write, ddl'; set pgaudit.log_relation = on; pgaudit.log 可选项如下 参数值 描述 none 这是原定设置值。不记录任何数据库更改。 all 记录

安装oracle https://hub.docker.com/r/dragonbest520/oracle-xe-10g 查询是否开启审计 show parameter audit; 使用ssh登陆 ssh root@localhost -p 49160 password: admin 开启审计 alter system set audit_sys_operations=TRUE scope=spfile; alter system set audit_trail=DB scope=spfile; alter system set audit_trail=db,extended scope=spfile; 查看审计结果 select username 用户,action_