audit-labs/audit-tools

A collection of scripts, queries, and other goodies you can use in an audit.

clone: git clone https://gitbay.org/audit-labs/audit-tools.git

main: databases/oracle/README.md · raw

 1# `oracle_admins.sql`
 2
 3``` sql
 4SELECT
 5    grantee AS "User",
 6    privilege AS "Privilege"
 7FROM
 8    dba_sys_privs
 9WHERE
10    grantee IN (SELECT DISTINCT grantee FROM dba_sys_privs)
11UNION ALL
12SELECT
13    grantee AS "User",
14    privilege AS "Privilege"
15FROM
16    dba_tab_privs
17WHERE
18    grantee IN (SELECT DISTINCT grantee FROM dba_tab_privs);
19```
20
21``` text
22| User     | Privilege           |
23|----------+---------------------|
24| SCOTT    | CREATE SESSION      |
25| SCOTT    | CREATE TABLE        |
26| SCOTT    | SELECT              |
27| SCOTT    | INSERT              |
28| HR       | CREATE SESSION      |
29| HR       | SELECT              |
30| HR       | INSERT              |
31| HR       | UPDATE              |
32| SYS      | CREATE USER         |
33| SYS      | GRANT ANY PRIVILEGE |
34| SYS      | DROP USER           |
35| SYSTEM   | CREATE TABLESPACE   |
36| SYSTEM   | CREATE USER         |
37| SYSTEM   | ALTER USER          |
38| SYSTEM   | DROP USER           |
39| APP_USER | SELECT ON EMPLOYEES |
40| APP_USER | INSERT ON EMPLOYEES |
41| APP_USER | UPDATE ON EMPLOYEES |
42```
43
44# `oracle_admins_alt.sql`
45
46``` sql
47SELECT ** FROM sys.dba_role_privs;
48SELECT ** FROM sys.dba_sys_privs;
49SELECT ** FROM sys.dba_tab_privs;
50SELECT ** FROM sys.dba_users;
51```
52
53``` text
54| Grantee  | Granted_Role | Admin_Option |
55|----------+--------------+--------------|
56| SCOTT    | DBA          | NO           |
57| HR       | RESOURCE     | YES          |
58| APP_USER | DATA_ANALYST | NO           |
59
60| Grantee | Privilege           |
61|---------+---------------------|
62| SCOTT   | CREATE SESSION      |
63| HR      | CREATE TABLE        |
64| SYS     | GRANT ANY PRIVILEGE |
65| SYSTEM  | CREATE USER         |
66
67| Grantee  | Table_Name  | Privilege |
68|----------+-------------+-----------|
69| SCOTT    | EMPLOYEES   | SELECT    |
70| SCOTT    | EMPLOYEES   | INSERT    |
71| HR       | DEPARTMENTS | SELECT    |
72| APP_USER | EMPLOYEES   | UPDATE    |
73
74| Username | Account_Status | Default_Tablespace | Temporary_Tablespace |
75|----------+----------------+--------------------+----------------------|
76| SCOTT    | OPEN           | USERS              | TEMP                 |
77| HR       | OPEN           | USERS              | TEMP                 |
78| SYS      | OPEN           | SYSTEM             | TEMP                 |
79| SYSTEM   | OPEN           | SYSTEM             | TEMP                 |
80| APP_USER | OPEN           | USERS              | TEMP                 |
81```