3. 安全检查

3.1 检查拥有DBA权限的用户

SELECT grantee, granted_role, admin_option, default_role 
FROM dba_role_privs
WHERE granted_role = 'DBA'
ORDER BY grantee;

--WINDOWS ORACLE11G
SELECT grantee, granted_role, admin_option, default_role FROM dba_role_privs WHERE granted_role = 'DBA'ORDER BY grantee;

3.2 检查拥有SYSDBA权限的用户

SELECT username, sysdba, sysoper
FROM v$pwfile_users
WHERE sysdba = 'TRUE'
ORDER BY username;

--WINDOWS ORACLE11G
SELECT username, sysdba, sysoper FROM v$pwfile_users WHERE sysdba = 'TRUE' ORDER BY username;

3.3 备份检查

• 归档日志检查

  • 检查归档日志是否已备份

  -- 查看未备份的归档日志数量
  SELECT COUNT(*) AS unbacked_archivelogs
   FROM v$archived_log
   WHERE backup_count = 0;

  • 检查归档日志备份的连续性

  -- 检查最近备份的归档日志范围
  SELECT MIN(sequence#) AS min_seq, MAX(sequence#) AS max_seq
  FROM v$backup_redolog;

• RMAN 备份检查

  • 检查最近7天的备份记录

  SELECT session_key, input_type, status, start_time, end_time, 
         ROUND(elapsed_seconds/60,2) AS duration_min, 
         input_bytes/1024/1024/1024 AS input_gb, 
         output_bytes/1024/1024/1024 AS output_gb
  FROM v$rman_backup_job_details
  WHERE start_time > SYSDATE - 7
  ORDER BY start_time DESC;

  • 检查备份集中是否包含必要的文件

  19C版本
  SELECT recid, bs_key, bp_key, handle, media, file_type,
         ROUND(bytes/1024/1024,2) AS mb
  FROM v$backup_piece
  ORDER BY recid DESC;

3.4 数据库启动时间

SELECT startup_time FROM v$instance;

‍