针对Oracle数据建议处理.doc

针对Oracle数据建议处理收集 Oracle 建议撤消 PUBLIC 对功能强大的程序包的 EXECUTE 权限解决： revoke execute on utl_file from public; revoke execute on DBMS_RANDOM from public; revoke execute on UTL_HTTP from public; revoke execute on UTL_SMTP from public; revoke execute on UTL_TCP from public; ------------------------------------------------- （1）：BUG:? 在em-console 控制台看到????? ---- 策略规矩????????????????????????建议案?????????????????????????????详细资料 EXECUTE UTL_FILE 权限??? Oracle 建议撤消PUBLIC对功能强大的程序包的EXECUTE 权限???????????? 程序包t(3)（2）： ?解决--- [oracle@localhost pfile]$ sqlplus? /nolog SQL*Plus: Release .0 - Production on Wed Mar 4 12:20:30 2009 Copyright (c) 1982, 2005, Oracle.? All rights reserved. SQL conn? /as? sysdba;Connected.SQL revoke? execute? on? utl_file from? public; Revoke succeeded.SQL revoke? execute on? DBMS_RANDOM? from? public;?? Revoke succeeded. SQL revoke? execute on UTL_HTTP? from? public; Revoke succeeded. SQL REVOKE? EXECUTE? ON UTL_TCP? FROM? PUBLIC; Revoke succeeded. Oracle 建议在用户概要文件中将 FAILED_LOGIN_ATTEMPTS 参数更改为不超过 10 的值alter profile default limit FAILED_LOGIN_ATTEMPTS unlimited; 不锁定用户alter profile default limit FAILED_LOGIN_ATTEMPTS 3; 三次后锁定用户select * from dba_profiles; Oracle Database 10g在缺省用户管理上有个小的改进，就是FAILED_LOGIN_ATTEMPTS的口令失败尝试变成了10次，这个设置的确有点问题。如果有一个用户不停尝试错误口令，那就会导致用户被锁。如果恢复之前无限制，可以通过一条命令解决：alter profile default limit FAILED_LOGIN_ATTEMPTS unlimited;数据库的profiles信息：SQL select * from dba_profiles;PROFILE????????? RESOURCE_NAME??????????????????? RESOURCE LIMIT---------------- -------------------------------- -------- ------------------------------DEFAULT????????? COMPOSITE_LIMIT????????????????? KERNEL?? UNLIMITEDDEFAULT????????? SESSIONS_PER_USER??????????????? KERNEL?? UNLIMITEDDEFAULT????????? CPU_PER_SESSION????????????????? KERNEL?? UNLIMITEDDEFAULT????????? CPU_PER_CALL???????????????????? KERNEL?? UNLIMITEDDEFAULT????????? LOGICAL_READS_PER_SESSION??????? KERNEL?? UNLIMITEDDEFAULT????????? LOGICAL_READS_PER_CALL?????????? KERNEL?? UNLIMITEDDEFAULT???????