查所有密码策略SELECT profile, resource_name, limit FROM dba_profiles WHERE resource_typePASSWORDORDER BY profile, resource_name;SELECT username, profile, account_status, profile FROM dba_users ORDER BY profile, username;SELECT text FROM dba_source WHERE nameORA12C_VERIFY_FUNCTIONORDER BY line;SELECT owner, object_name, object_type, status FROM dba_objects WHERE object_name LIKE%VERIFY%;setlinesize400col usernamefora30 col account_statusfora20 col profilefora20 col resource_namefora30 SELECT u.username, u.account_status, u.profile, p.resource_name, p.limit FROM dba_users u JOIN dba_profiles p ON u.profilep.profile WHERE p.resource_typePASSWORDORDER BY u.username, p.resource_name;查看密码复杂度函数源码SET PAGESIZE500SET LINESIZE200COL TEXT FORMAT A180 SELECT name, line, text FROM dba_source WHERE ownerSYSANDtypeFUNCTIONAND name IN(ORA12C_VERIFY_FUNCTION,ORA12C_STIG_VERIFY_FUNCTION)ORDER BY name, line;如果只想看 STIG 这个策略 SELECT line, text FROM dba_source WHERE ownerSYSANDtypeFUNCTIONAND nameORA12C_STIG_VERIFY_FUNCTIONORDER BY line;只看默认策略 SELECT line, text FROM dba_source WHERE ownerSYSANDtypeFUNCTIONAND nameORA12C_VERIFY_FUNCTIONORDER BY line;2. 如果查不到源码先确认函数在哪个用户下 SELECT owner, object_name, object_type, status FROM dba_objects WHERE object_name IN(ORA12C_VERIFY_FUNCTION,ORA12C_STIG_VERIFY_FUNCTION);查看函数 DDL SET LONG100000SET PAGESIZE500SET LINESIZE200SELECT dbms_metadata.get_ddl(FUNCTION,ORA12C_VERIFY_FUNCTION,SYS)FROM dual;SELECT dbms_metadata.get_ddl(FUNCTION,ORA12C_STIG_VERIFY_FUNCTION,SYS)FROM dual;
oracle密码策略检查
查所有密码策略SELECT profile, resource_name, limit FROM dba_profiles WHERE resource_typePASSWORDORDER BY profile, resource_name;SELECT username, profile, account_status, profile FROM dba_users ORDER BY profile, username;SELECT text FROM dba_source WHERE nameORA12C_VERIFY_FUNCTIONORDER BY line;SELECT owner, object_name, object_type, status FROM dba_objects WHERE object_name LIKE%VERIFY%;setlinesize400col usernamefora30 col account_statusfora20 col profilefora20 col resource_namefora30 SELECT u.username, u.account_status, u.profile, p.resource_name, p.limit FROM dba_users u JOIN dba_profiles p ON u.profilep.profile WHERE p.resource_typePASSWORDORDER BY u.username, p.resource_name;查看密码复杂度函数源码SET PAGESIZE500SET LINESIZE200COL TEXT FORMAT A180 SELECT name, line, text FROM dba_source WHERE ownerSYSANDtypeFUNCTIONAND name IN(ORA12C_VERIFY_FUNCTION,ORA12C_STIG_VERIFY_FUNCTION)ORDER BY name, line;如果只想看 STIG 这个策略 SELECT line, text FROM dba_source WHERE ownerSYSANDtypeFUNCTIONAND nameORA12C_STIG_VERIFY_FUNCTIONORDER BY line;只看默认策略 SELECT line, text FROM dba_source WHERE ownerSYSANDtypeFUNCTIONAND nameORA12C_VERIFY_FUNCTIONORDER BY line;2. 如果查不到源码先确认函数在哪个用户下 SELECT owner, object_name, object_type, status FROM dba_objects WHERE object_name IN(ORA12C_VERIFY_FUNCTION,ORA12C_STIG_VERIFY_FUNCTION);查看函数 DDL SET LONG100000SET PAGESIZE500SET LINESIZE200SELECT dbms_metadata.get_ddl(FUNCTION,ORA12C_VERIFY_FUNCTION,SYS)FROM dual;SELECT dbms_metadata.get_ddl(FUNCTION,ORA12C_STIG_VERIFY_FUNCTION,SYS)FROM dual;