数据库管理系统测评检查命令
Oracle
数据库 命令 数据库检查时主要使用select只读查看命令，主要查看用户情况、安全策略配置文件、日志等。 cat /$ORACLE_HOME/rdbms/admin/utlpwdmg.sql cat /$ORACLE_HOME/network/admin/sqlnet.ora select * from v$version; select username,account_status from dba_users; select resource_name,limit from dba_profiles where profile='DEFAULT'; select granted_role from dba_role_privs where grantee='PUBLIC'; show parameter O7_DICTIONARY_ACCESSIBILITY; show parameter audit show parameter audit_sys_operations; show parameter audit_trail; select * from dba_stmt_audit_opts; 说明 Oracle数据库管理系统测评检查命令 select grantee from dba_tab_privs where table_name='AUD$' and grantee not in ('DELETE_CATALOG_ROLE') and grantee not in (select grantee from dba_role_privs where granted_role='DBA'); select resource_name,limit from dba_profiles where profile='DEFAULT' and resource_type='KERNEL'; select username,profile from dba_users; select * from dba_role_privs where granted_role= 'DBA'; select * from V_$PWFILE_USERS; archive log list; show parameter log_archive_dest; select * from role_sys_privs; select * from dba_sys_privs select policy_name,status from dba_sa_policies; select * from sys.aud$ where ROWNUM<5; SELECT name,password FROM user$ WHERE name='SYS'; select name from v$database; select instance_name from v$instance; Mysql
数据库检查时主要使用select只读查看命令，主要查看用户情况、安全策略配置文件、日志等（连接数据库：mysql –uusername –ppassword show databases；use mysql；） cat my.ini select user(); select host,user,password from mysql.user; show global variables like \ Mysql数据管理系统测评检查命令 show variables like '%skip_networking%'; show variables like 'log_%'; show variables; select * from mysql.user; select version(); netstat -lnpt | grep 3306 cat .mysql_history cat /etc/my.cnf SELECT DISTINCT CONCAT('User: ''',user,'''@''',host,''';') AS query FROM mysql.user; show grants for username@'hostname'; SELECT * FROM db