Asi jste si toho všimli, že Oracle 12c velmi rychle zaplňuje SYSAUX tablespace.
Je díky tomu, že tam je defaultně nastaveno pravidlo pro logování ORA_SECURECONFIG.
SQL> SELECT * FROM SYS.AUDIT_UNIFIED_ENABLED_POLICIES; USER_NAME POLICY_NAME ENABLED_ SUC FAI --------------------------------------------------------------------- ALL USERS ORA_SECURECONFIG BY YES YES
SQL> SELECT POLICY_NAME, AUDIT_OPTION, AUDIT_OPTION_TYPE 2 FROM AUDIT_UNIFIED_POLICIES 3 where policy_name = 'ORA_SECURECONFIG' 4 order by policy_name, AUDIT_OPTION; POLICY_NAME AUDIT_OPTION AUDIT_OPTION_TYPE ------------------------- ------------------------- ------------------------- ORA_SECURECONFIG ADMINISTER KEY MANAGEMENT SYSTEM PRIVILEGE ORA_SECURECONFIG ALTER ANY PROCEDURE SYSTEM PRIVILEGE ORA_SECURECONFIG ALTER ANY SQL TRANSLATION SYSTEM PRIVILEGE PROFILE ORA_SECURECONFIG ALTER ANY TABLE SYSTEM PRIVILEGE ORA_SECURECONFIG ALTER DATABASE SYSTEM PRIVILEGE ORA_SECURECONFIG ALTER DATABASE LINK STANDARD ACTION ORA_SECURECONFIG ALTER PLUGGABLE DATABASE STANDARD ACTION ORA_SECURECONFIG ALTER PROFILE STANDARD ACTION ORA_SECURECONFIG ALTER ROLE STANDARD ACTION ORA_SECURECONFIG ALTER SYSTEM SYSTEM PRIVILEGE ORA_SECURECONFIG ALTER USER STANDARD ACTION ORA_SECURECONFIG AUDIT SYSTEM SYSTEM PRIVILEGE ORA_SECURECONFIG CREATE ANY JOB SYSTEM PRIVILEGE ORA_SECURECONFIG CREATE ANY LIBRARY SYSTEM PRIVILEGE ORA_SECURECONFIG CREATE ANY PROCEDURE SYSTEM PRIVILEGE ORA_SECURECONFIG CREATE ANY SQL TRANSLATIO SYSTEM PRIVILEGE N PROFILE ORA_SECURECONFIG CREATE ANY TABLE SYSTEM PRIVILEGE ORA_SECURECONFIG CREATE DATABASE LINK STANDARD ACTION ORA_SECURECONFIG CREATE DIRECTORY STANDARD ACTION ORA_SECURECONFIG CREATE EXTERNAL JOB SYSTEM PRIVILEGE ORA_SECURECONFIG CREATE PLUGGABLE DATABASE STANDARD ACTION ORA_SECURECONFIG CREATE PROFILE STANDARD ACTION ORA_SECURECONFIG CREATE PUBLIC SYNONYM SYSTEM PRIVILEGE ORA_SECURECONFIG CREATE ROLE STANDARD ACTION ORA_SECURECONFIG CREATE SQL TRANSLATION PR SYSTEM PRIVILEGE OFILE ORA_SECURECONFIG CREATE USER SYSTEM PRIVILEGE ORA_SECURECONFIG DROP ANY PROCEDURE SYSTEM PRIVILEGE ORA_SECURECONFIG DROP ANY SQL TRANSLATION SYSTEM PRIVILEGE PROFILE ORA_SECURECONFIG DROP ANY TABLE SYSTEM PRIVILEGE ORA_SECURECONFIG DROP DATABASE LINK STANDARD ACTION ORA_SECURECONFIG DROP DIRECTORY STANDARD ACTION ORA_SECURECONFIG DROP PLUGGABLE DATABASE STANDARD ACTION ORA_SECURECONFIG DROP PROFILE STANDARD ACTION ORA_SECURECONFIG DROP PUBLIC SYNONYM SYSTEM PRIVILEGE ORA_SECURECONFIG DROP ROLE STANDARD ACTION ORA_SECURECONFIG DROP USER SYSTEM PRIVILEGE ORA_SECURECONFIG EXEMPT ACCESS POLICY SYSTEM PRIVILEGE ORA_SECURECONFIG EXEMPT REDACTION POLICY SYSTEM PRIVILEGE ORA_SECURECONFIG GRANT ANY OBJECT PRIVILEG SYSTEM PRIVILEGE E ORA_SECURECONFIG GRANT ANY PRIVILEGE SYSTEM PRIVILEGE ORA_SECURECONFIG GRANT ANY ROLE SYSTEM PRIVILEGE ORA_SECURECONFIG LOGMINING SYSTEM PRIVILEGE ORA_SECURECONFIG LOGOFF STANDARD ACTION ORA_SECURECONFIG LOGON STANDARD ACTION ORA_SECURECONFIG PURGE DBA_RECYCLEBIN SYSTEM PRIVILEGE ORA_SECURECONFIG SET ROLE STANDARD ACTION ORA_SECURECONFIG TRANSLATE ANY SQL SYSTEM PRIVILEGE
Řešení
Řešení může být vypnutí dané politiky.
SQL> noaudit policy ORA_SECURECONFIG; Noaudit succeeded. SQL> SELECT * FROM SYS.AUDIT_UNIFIED_ENABLED_POLICIES; no rows selected
Já osobně, pokud se mě do databáze připojují uživatelé pouze přes aplikační server, tak vypínám i CREATE SESSION.
SQL> noaudit create session; Noaudit succeeded.
Případně vše, je-li to test.
SQL> noaudit all; Noaudit succeeded.