柚子快報(bào)激活碼778899分享：dba Oracle數(shù)據(jù)庫(kù)

http://yzkb.51969.com/

Oracle數(shù)據(jù)庫(kù)測(cè)評(píng)

安裝oracle

一、docker拉取oracle

docker pull registry.cn-hangzhou.aliyuncs.com/helowin/oracle_11g

二、運(yùn)行容器

服務(wù)器需要開(kāi)啟oracle的默認(rèn)1521端口

firewall-cmd --zone=public --add-port=1521/tcp --permanent

firewall-cmd --reload

docker run -d -p 1521:1521 --name oracle11g registry.cn-hangzhou.aliyuncs.com/helowin/oracle_11g -v /home/oracle/app/oracle/product/11.2.0/dbhome_2:/home/oracle/app/oracle/product/11.2.0/dbhome_2

三、進(jìn)入容器配置

docker exec -it oracle11g bash

切換到root用戶下進(jìn)行配置: su root 輸入密碼: helowin

編輯profile文件配置ORACLE環(huán)境變量: vi /etc/profile ,并添加如下內(nèi)容, 保存退出后使配置生效 source /etc/profile

export ORACLE_HOME=/home/oracle/app/oracle/product/11.2.0/dbhome_2

export ORACLE_SID=helowin

export PATH=$ORACLE_HOME/bin:$PATH

創(chuàng)建軟連接: ln -s $ORACLE_HOME/bin/sqlplus /usr/bin切換到oracle 用戶: su - oracle

登錄sqlplus并修改sys、system用戶密碼:

sudo oracle

sqlplus /nolog # 登錄

conn /as sysdba # 連接

alter user system identified by system; # 修改system的密碼為system

alter user sys identified by sys; # 修改sys的密碼為sys

alter profile default limit password_life_time unlimited;

exit;

測(cè)評(píng)

身份鑒別

密碼復(fù)雜度

select * from dba_profiles where profile = 'DEFAULT';

select * from dba_profiles where profile = 'PASSWORD_VERIFY_FUNCTION';

口令有效期

select * from dba_profiles where profile = 'password_life_time';

select * from dba_profiles where profile = 'DEFAULT';

登陸失敗處理

select limit from dba_profiles where profile =‘DEFAULT’ and resource_name =‘FAILED_LOGIN_ATTEMPTS’;

登錄失敗后鎖定時(shí)間

SELECT LIMIT FROM DBA_PROFILES WHERE PROFILE=‘DEFAULT’ AND RESOURCE_NAME=‘PASSWORD_LOCK_TIME’;

登錄超時(shí)策略

SELECT LIMIT FROM DBA_PROFILES WHERE PROFILE='DEFAULT' AND RESOURCE_NAME='IDLE_TIME';

訪問(wèn)控制

登錄用戶分配賬戶權(quán)限

select username,account_status from dba_users;

select username,profile from dba_users where account_status='OPEN';

默認(rèn)賬戶

sys默認(rèn)口令為CHANGE_ON_INSTALL；SYSTEM：MANAGER；DBSNMP的默認(rèn)口令為：DBSNMP

嘗試默認(rèn)口令登錄即可驗(yàn)證

多余過(guò)期共享賬戶

select username,account_status from dba_users;

管理賬戶的權(quán)限分離

select * from dba_tab_privs where grantee='SYS' ORDER BY GRANTEE;

安全審計(jì)

開(kāi)啟審計(jì)

用戶審計(jì)

select value from v$parameter where name ='audit_trail';

show parameter audit_trail;

重要事件審計(jì)

select * from dba_stmt_audit_opts;

select * from dba_priv_audit_opts;

特權(quán)連接SQL語(yǔ)句進(jìn)行審計(jì)

show parameter audit_sys_operations;

select * from dba_stmt_audit_opts;

審計(jì)內(nèi)容

入侵防范

最小安裝

select * from v$option;

本文環(huán)境搭建參考以下博客 https://blog.csdn.net/zwq56693/article/details/123903308

柚子快報(bào)激活碼778899分享：dba Oracle數(shù)據(jù)庫(kù)

http://yzkb.51969.com/

推薦文章