数据库漏扫修复

人大金仓

直接修改kingbase.conf

shared_preload_libraries = 'liboracle_parser, synonym, plsql, force_view, kdb_flashback,plugin_debugger, plsql_plugin_debugger, plsql_plprofiler, kdb_ora_expr, sepapower, dblink, sys_kwr, sys_spacequota, sys_stat_statements, backtrace, kdb_utils_function, auto_bmr, sys_squeeze, src_restrict,passwordcheck,identity_pwdexp,sys_audlog'
ora_input_emptystr_isnull = on
ora_integer_div_returnfloat = on


# 密码复杂度设置
passwordcheck.enable = on                  # 开启密码检查功能
passwordcheck.password_length = 8          # 密码最小长度设为8位
passwordcheck.password_condition_upper = 1 # 至少包含1个大写字母
passwordcheck.password_condition_lower = 1 # 至少包含1个小写字母
passwordcheck.password_condition_punct = 1 # 至少包含1个特殊字符


#口令有效期
identity_pwdexp.password_change_interval =180


#允许用户连续登录失败的最大次数
sys_audlog.error_user_connect_times = 5
#用户被锁定时间 10分钟
sys_audlog.error_user_connect_interval =10