Re: auditing database

Posted by Roshan on Nov 17, 2017; 12:00pm
URL: http://erman-arslan-s-oracle-forum.124.s1.nabble.com/auditing-database-tp4515p4520.html

I have executed a script to collect details for auditing. Can you please advise any flaws for password profiles

LIMIT VARCHAR2(128)|^|PROFILE VARCHAR2(128)|^|RESOURCE_NAME VARCHAR2(32)|^|RESOURCE_TYPE VARCHAR2(8)
DEFAULT|^|CBS_USER|^|COMPOSITE_LIMIT|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|COMPOSITE_LIMIT|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|COMPOSITE_LIMIT|^|KERNEL
UNLIMITED|^|DEFAULT|^|COMPOSITE_LIMIT|^|KERNEL
DEFAULT|^|CBS_USER|^|SESSIONS_PER_USER|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|SESSIONS_PER_USER|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|SESSIONS_PER_USER|^|KERNEL
UNLIMITED|^|DEFAULT|^|SESSIONS_PER_USER|^|KERNEL
DEFAULT|^|CBS_USER|^|CPU_PER_SESSION|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|CPU_PER_SESSION|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|CPU_PER_SESSION|^|KERNEL
UNLIMITED|^|DEFAULT|^|CPU_PER_SESSION|^|KERNEL
UNLIMITED|^|CBS_USER|^|CPU_PER_CALL|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|CPU_PER_CALL|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|CPU_PER_CALL|^|KERNEL
UNLIMITED|^|DEFAULT|^|CPU_PER_CALL|^|KERNEL
DEFAULT|^|CBS_USER|^|LOGICAL_READS_PER_SESSION|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|LOGICAL_READS_PER_SESSION|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|LOGICAL_READS_PER_SESSION|^|KERNEL
UNLIMITED|^|DEFAULT|^|LOGICAL_READS_PER_SESSION|^|KERNEL
DEFAULT|^|CBS_USER|^|LOGICAL_READS_PER_CALL|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|LOGICAL_READS_PER_CALL|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|LOGICAL_READS_PER_CALL|^|KERNEL
UNLIMITED|^|DEFAULT|^|LOGICAL_READS_PER_CALL|^|KERNEL
DEFAULT|^|CBS_USER|^|IDLE_TIME|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|IDLE_TIME|^|KERNEL
15|^|ORA_STIG_PROFILE|^|IDLE_TIME|^|KERNEL
UNLIMITED|^|DEFAULT|^|IDLE_TIME|^|KERNEL
UNLIMITED|^|CBS_USER|^|CONNECT_TIME|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|CONNECT_TIME|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|CONNECT_TIME|^|KERNEL
UNLIMITED|^|DEFAULT|^|CONNECT_TIME|^|KERNEL
DEFAULT|^|CBS_USER|^|PRIVATE_SGA|^|KERNEL
DEFAULT|^|PROFILE_CBS|^|PRIVATE_SGA|^|KERNEL
DEFAULT|^|ORA_STIG_PROFILE|^|PRIVATE_SGA|^|KERNEL
UNLIMITED|^|DEFAULT|^|PRIVATE_SGA|^|KERNEL
6|^|CBS_USER|^|FAILED_LOGIN_ATTEMPTS|^|PASSWORD
10|^|PROFILE_CBS|^|FAILED_LOGIN_ATTEMPTS|^|PASSWORD
3|^|ORA_STIG_PROFILE|^|FAILED_LOGIN_ATTEMPTS|^|PASSWORD
10|^|DEFAULT|^|FAILED_LOGIN_ATTEMPTS|^|PASSWORD
120|^|CBS_USER|^|PASSWORD_LIFE_TIME|^|PASSWORD
UNLIMITED|^|PROFILE_CBS|^|PASSWORD_LIFE_TIME|^|PASSWORD
60|^|ORA_STIG_PROFILE|^|PASSWORD_LIFE_TIME|^|PASSWORD
180|^|DEFAULT|^|PASSWORD_LIFE_TIME|^|PASSWORD
UNLIMITED|^|CBS_USER|^|PASSWORD_REUSE_TIME|^|PASSWORD
10|^|PROFILE_CBS|^|PASSWORD_REUSE_TIME|^|PASSWORD
365|^|ORA_STIG_PROFILE|^|PASSWORD_REUSE_TIME|^|PASSWORD
UNLIMITED|^|DEFAULT|^|PASSWORD_REUSE_TIME|^|PASSWORD
UNLIMITED|^|CBS_USER|^|PASSWORD_REUSE_MAX|^|PASSWORD
10|^|PROFILE_CBS|^|PASSWORD_REUSE_MAX|^|PASSWORD
10|^|ORA_STIG_PROFILE|^|PASSWORD_REUSE_MAX|^|PASSWORD
UNLIMITED|^|DEFAULT|^|PASSWORD_REUSE_MAX|^|PASSWORD
ORA12C_VERIFY_FUNCTION|^|CBS_USER|^|PASSWORD_VERIFY_FUNCTION|^|PASSWORD
ORA12C_VERIFY_FUNCTION|^|PROFILE_CBS|^|PASSWORD_VERIFY_FUNCTION|^|PASSWORD
ORA12C_STRONG_VERIFY_FUNCTION|^|ORA_STIG_PROFILE|^|PASSWORD_VERIFY_FUNCTION|^|PASSWORD
ORA12C_VERIFY_FUNCTION|^|DEFAULT|^|PASSWORD_VERIFY_FUNCTION|^|PASSWORD
1|^|CBS_USER|^|PASSWORD_LOCK_TIME|^|PASSWORD
.0006|^|PROFILE_CBS|^|PASSWORD_LOCK_TIME|^|PASSWORD
UNLIMITED|^|ORA_STIG_PROFILE|^|PASSWORD_LOCK_TIME|^|PASSWORD
1|^|DEFAULT|^|PASSWORD_LOCK_TIME|^|PASSWORD
7|^|CBS_USER|^|PASSWORD_GRACE_TIME|^|PASSWORD
UNLIMITED|^|PROFILE_CBS|^|PASSWORD_GRACE_TIME|^|PASSWORD
5|^|ORA_STIG_PROFILE|^|PASSWORD_GRACE_TIME|^|PASSWORD
7|^|DEFAULT|^|PASSWORD_GRACE_TIME|^|PASSWORD

Regards,

Roshan