You are on page 1of 2

11g: Disable DBV

1. shutdown listener and DB and DB Control


2. relink
$ cd $ORACLE_HOME/rdbms/lib
$ make -f ins_rdbms.mk dv_off ioracle
3. start again

3.
correct the issue
Use the Oracle Database Vault PL/SQL packages and functions. For example,
to correct a login or CONNECT rule set error, use the DBMS_MACADM PL/SQL package or
the Oracle Database Vault Administrator interface.

select object_name,object_type from dba_objects


where object_type in ('TABLE','VIEW') and object_name like '%DBA_DV%'
and owner='DVSYS' order by 1

select * from dvsys.dba_dv_realm order by name;


select * from dvsys.DBA_DV_REALM_OBJECT order by realm_name;
select * from dvsys.DBA_DV_REALM_AUTH order by realm_name;

select * from dvsys.DBA_DV_COMMAND_RULE order by command;

select * from dvsys.DBA_DV_RULE_SET order by rule_set_name;


select * from dvsys.DBA_DV_RULE_SET_RULE order by rule_set_name;

select * from dvsys.DBA_DV_RULE order by 1;

select * from dvsys.DBA_DV_FACTOR order by name;

select * from dvsys.DBA_DV_DATAPUMP_AUTH order by 1;

select * from dvsys.DBA_DV_REALM_COMMAND_RULE order by realm_name;


select * from dvsys.DBA_DV_ROLE order by role;

BEGIN
DVSYS.DBMS_MACADM.DELETE_COMMAND_RULE(
command => 'SELECT',
object_owner => 'SYSADM',
object_name => 'EMP_DATA');
END;
/

BEGIN
DVSYS.DBMS_MACADM.DELETE_COMMAND_RULE(
command => 'CONNECT',
object_owner => '%',
object_name => '%');
END;
/

--- to disable a command rule -----


BEGIN
DBMS_MACADM.UPDATE_COMMAND_RULE(
command => 'CONNECT',
rule_set_name => 'Restrict CONNECT to DB',
object_owner => '%',
object_name => '%',
enabled => DBMS_MACUTL.G_NO);
END;
/

--- to enable a command rule -----


BEGIN
DBMS_MACADM.UPDATE_COMMAND_RULE(
command => 'CONNECT',
rule_set_name => 'Restrict CONNECT to DB',
object_owner => '%',
object_name => '%',
enabled => DBMS_MACUTL.G_YES);
END;
/

BEGIN
DBMS_MACADM.UPDATE_COMMAND_RULE(
command => 'SELECT',
rule_set_name => 'Limit Sector 2 Access',
object_owner => 'SYSADM',
object_name => '%',
enabled => DBMS_MACUTL.G_NO);
END;
/

4. enable DBV:
1. shutdown listener and DB and DB Control
2. relink
cd $ORACLE_HOME/rdbms/lib
$ make -f ins_rdbms.mk dv_on lbac_on ioracle
3. start again

You might also like