Enable Unified Auditing
Relink is required to enable the new audit mechanism announced with Oracle database 12c (12.1). You can do this as follows.
First, if there is a database running from the relevant Oracle Home directory, the listener services must be shut down.
You can then enable it as follows.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 |
[oracle@orcldb01 ~]$ cd $ORACLE_HOME/rdbms/lib [oracle@orcldb01 lib]$ pwd /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib [oracle@orcldb01 lib]$ [oracle@orcldb01 lib]$ [oracle@orcldb01 lib]$ make -f ins_rdbms.mk uniaud_on ioracle /usr/bin/ar d /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a kzanang.o /usr/bin/ar cr /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/kzaiang.o chmod 755 /u01/app/oracle/product/12.2.0.1/dbhome_1/bin - Linking Oracle rm -f /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/oracle /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/orald -o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/oracle -m64 -z noexecstack -Wl,--disable-new-dtags -L/u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/ -L/u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ -L/u01/app/oracle/product/12.2.0.1/dbhome_1/lib/stubs/ -Wl,-E /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/opimai.o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/ssoraed.o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/ttcsoi.o -Wl,--whole-archive -lperfsrv12 -Wl,--no-whole-archive /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/nautab.o /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/naeet.o /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/naect.o /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/naedhs.o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/config.o -ldmext -lserver12 -lodm12 -lofs -lcell12 -lnnet12 -lskgxp12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lclient12 -lvsn12 -lcommon12 -lgeneric12 -lknlopt `if /usr/bin/ar tv /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a | grep xsyeolap.o > /dev/null 2>&1 ; then echo "-loraolap12" ; fi` -lskjcx12 -lslax12 -lpls12 -lrt -lplp12 -ldmext -lserver12 -lclient12 -lvsn12 -lcommon12 -lgeneric12 `if [ -f /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/libavserver12.a ] ; then echo "-lavserver12" ; else echo "-lavstub12"; fi` `if [ -f /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/libavclient12.a ] ; then echo "-lavclient12" ; fi` -lknlopt -lslax12 -lpls12 -lrt -lplp12 -ljavavm12 -lserver12 -lwwg `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnro12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnnzst12 -lzt12 -lztkg12 -lmm -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lztkg12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnro12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnnzst12 -lzt12 -lztkg12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 `if /usr/bin/ar tv /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a | grep "kxmnsd.o" > /dev/null 2>&1 ; then echo " " ; else echo "-lordsdo12 -lserver12"; fi` -L/u01/app/oracle/product/12.2.0.1/dbhome_1/ctx/lib/ -lctxc12 -lctx12 -lzx12 -lgx12 -lctx12 -lzx12 -lgx12 -lordimt12 -lclsra12 -ldbcfg12 -lhasgen12 -lskgxn2 -lnnzst12 -lzt12 -lxml12 -lgeneric12 -locr12 -locrb12 -locrutl12 -lhasgen12 -lskgxn2 -lnnzst12 -lzt12 -lxml12 -lgeneric12 -lgeneric12 -lorazip -loraz -llzopro5 -lorabz2 -lipp_z -lipp_bz2 -lippdcemerged -lippsemerged -lippdcmerged -lippsmerged -lippcore -lippcpemerged -lippcpmerged -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lsnls12 -lunls12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lasmclnt12 -lcommon12 -lcore12 -laio -lons -lfthread12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/sysliblist` -Wl,-rpath,/u01/app/oracle/product/12.2.0.1/dbhome_1/lib -lm `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/sysliblist` -ldl -lm -L/u01/app/oracle/product/12.2.0.1/dbhome_1/lib `test -x /usr/bin/hugeedit -a -r /usr/lib64/libhugetlbfs.so && test -r /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/shugetlbfs.o && echo -Wl,-zcommon-page-size=2097152 -Wl,-zmax-page-size=2097152 -lhugetlbfs` test ! -f /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle || (\ mv -f /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracleO &&\ chmod 600 /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracleO ) mv /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/oracle /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle chmod 6751 /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle |
Then, you can start all the services running from the related Oracle home.
Check Unified Auditing is Enabled
You can see that it is enabled with the following query.
|
1 2 3 4 5 |
SQL> SELECT VALUE FROM V$OPTION WHERE PARAMETER = 'Unified Auditing'; VALUE ---------------------------------------------------------------- TRUE |
Disable Unified Auditing
Relink is required to disable Unified Auditing. You can do this as follows.
First, if there is a database running from the relevant Oracle Home directory, the listener services must be shut down.
You can then disable it as follows.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 |
[oracle@orcldb01 ~]$ cd $ORACLE_HOME/rdbms/lib [oracle@orcldb01 lib]$ pwd /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib [oracle@orcldb01 lib]$ make -f ins_rdbms.mk uniaud_off ioracle /usr/bin/ar d /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a kzaiang.o /usr/bin/ar cr /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/kzanang.o chmod 755 /u01/app/oracle/product/12.2.0.1/dbhome_1/bin - Linking Oracle rm -f /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/oracle /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/orald -o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/oracle -m64 -z noexecstack -Wl,--disable-new-dtags -L/u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/ -L/u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ -L/u01/app/oracle/product/12.2.0.1/dbhome_1/lib/stubs/ -Wl,-E /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/opimai.o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/ssoraed.o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/ttcsoi.o -Wl,--whole-archive -lperfsrv12 -Wl,--no-whole-archive /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/nautab.o /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/naeet.o /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/naect.o /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/naedhs.o /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/config.o -ldmext -lserver12 -lodm12 -lofs -lcell12 -lnnet12 -lskgxp12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lclient12 -lvsn12 -lcommon12 -lgeneric12 -lknlopt `if /usr/bin/ar tv /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a | grep xsyeolap.o > /dev/null 2>&1 ; then echo "-loraolap12" ; fi` -lskjcx12 -lslax12 -lpls12 -lrt -lplp12 -ldmext -lserver12 -lclient12 -lvsn12 -lcommon12 -lgeneric12 `if [ -f /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/libavserver12.a ] ; then echo "-lavserver12" ; else echo "-lavstub12"; fi` `if [ -f /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/libavclient12.a ] ; then echo "-lavclient12" ; fi` -lknlopt -lslax12 -lpls12 -lrt -lplp12 -ljavavm12 -lserver12 -lwwg `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnro12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnnzst12 -lzt12 -lztkg12 -lmm -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lztkg12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnro12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lngsmshd12 -lnnzst12 -lzt12 -lztkg12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 `if /usr/bin/ar tv /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/libknlopt.a | grep "kxmnsd.o" > /dev/null 2>&1 ; then echo " " ; else echo "-lordsdo12 -lserver12"; fi` -L/u01/app/oracle/product/12.2.0.1/dbhome_1/ctx/lib/ -lctxc12 -lctx12 -lzx12 -lgx12 -lctx12 -lzx12 -lgx12 -lordimt12 -lclsra12 -ldbcfg12 -lhasgen12 -lskgxn2 -lnnzst12 -lzt12 -lxml12 -lgeneric12 -locr12 -locrb12 -locrutl12 -lhasgen12 -lskgxn2 -lnnzst12 -lzt12 -lxml12 -lgeneric12 -lgeneric12 -lorazip -loraz -llzopro5 -lorabz2 -lipp_z -lipp_bz2 -lippdcemerged -lippsemerged -lippdcmerged -lippsmerged -lippcore -lippcpemerged -lippcpmerged -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lsnls12 -lunls12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lasmclnt12 -lcommon12 -lcore12 -laio -lons -lfthread12 `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/sysliblist` -Wl,-rpath,/u01/app/oracle/product/12.2.0.1/dbhome_1/lib -lm `cat /u01/app/oracle/product/12.2.0.1/dbhome_1/lib/sysliblist` -ldl -lm -L/u01/app/oracle/product/12.2.0.1/dbhome_1/lib `test -x /usr/bin/hugeedit -a -r /usr/lib64/libhugetlbfs.so && test -r /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/shugetlbfs.o && echo -Wl,-zcommon-page-size=2097152 -Wl,-zmax-page-size=2097152 -lhugetlbfs` test ! -f /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle || (\ mv -f /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracleO &&\ chmod 600 /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracleO ) mv /u01/app/oracle/product/12.2.0.1/dbhome_1/rdbms/lib/oracle /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle chmod 6751 /u01/app/oracle/product/12.2.0.1/dbhome_1/bin/oracle |
Check Unified Auditing is Disabled
You can see that it is disabled with the following query.
|
1 2 3 4 5 |
SQL> SELECT VALUE FROM V$OPTION WHERE PARAMETER = 'Unified Auditing'; VALUE ---------------------------------------------------------------- FALSE |
