数据库管理系统检查命令清单.doc

数据库管理系统测评检查命令Oracle数据库命令说明Oracle数据库管理系统测评检查命令数据库检查时主要使用select只读查看命令，主要查看用户情况、安全策略配置文件、日志等。cat/$ORACLE_HOME/rdbms/admin/utlpwdmg.sqlcat/$ORACLE_HOME/network/admin/sqlnet.oraselect*fromv$version;selectusername,account_statusfromdba_users;selectresource_name,limitfromdba_profileswhereprofile='DEFAULT';selectgranted_rolefromdba_role_privswheregrantee='PUBLIC';showparameterO7_DICTIONARY_ACCESSIBILITY;showparameterauditshowparameteraudit_sys_operations;showparameteraudit_trail;select*fromdba_stmt_audit_opts;selectgranteefromdba_tab_privswheretable_name='AUD$'andgranteenotin('DELETE_CATALOG_ROLE')andgranteenotin(selectgranteefromdba_role_privswheregranted_role='DBA');selectresource_name,limitfromdba_profileswhereprofile='DEFAULT'andresource_type='KERNEL';selectusername,profilefromdba_users;select*fromdba_role_privswheregranted_role='DBA';select*fromV_$PWFILE_USERS;archiveloglist;showparameterlog_archive_dest;select*fromrole_sys_privs;select*fromdba_sys_privsselectpolicy_name,statusfromdba_sa_policies;select*fromsys.aud$whereROWNUM<5;SELECTname,passwordFROMuser$WHEREname='SYS';selectnamefromv$database;selectinstance_namefromv$instance;MysqlMysql数据管理系统测评检查命令数据库检查时主要使用select只读查看命令，主要查看用户情况、安全策略配置文件、日志等（连接数据库：mysql–uusername–ppasswordshowdatabases；usemysql；）catmy.iniselectuser();selecthost,user,passwordfrommysql.user;showglobalvariableslike"%timeout%";showvariableslike'%skip_networking%';showvariableslike'log_%';showvariables;select*frommysql.user;selectversion();netstat-lnpt|grep3306cat.mysql_historycat/etc/my.cnfSELECTDISTINCTCONCAT('User:''',user,'''@''',host,''';')ASqueryFROMmysql.user;showgrantsforusername@'hostname';SELECT*FROMdb