init.ora – ‘global_names = TRUE’
Details Level 1, Scorable Supportive Information The following resource is also helpful. https://workbench.cisecurity.org/files/580 This security hardening control applies to the...
- Home
- Security Hardening
- CIS V1.1.0 Oracle 11G OS L1
CIS V1.1.0 Oracle 11G OS L1
init.ora – ‘sec_case_sensitive_logon = TRUE’
Details Level 1, Scorable Supportive Information The following resource is also helpful. https://workbench.cisecurity.org/files/580 This security hardening control applies to the...init.ora – ‘sec_max_failed_login_attempts = 3’
Details a password brute force attack. Note: Setting SEC_MAX_FAILED_LOGIN_ATTEMPTS to a value other than UNLIMITED may increase an attacker’s Supportive...init.ora – ‘sec_protocol_error_further_action = DELAY
or DROP ‘ Details Level 1, Scorable Supportive Information The following resource is also helpful. https://workbench.cisecurity.org/files/580 This security hardening control applies to the...init.ora – ‘Specify redo logging must be successful.’
Details Specifying that the logging must succeed in one or more locations ensures redundance of the redo logs. Supportive Information...init.ora – ‘_trace_files_public = FALSE’
Details an internal Oracle parameter. Do NOT use it unless instructed to do so by Oracle Support. Supportive Information The...init.ora – ‘Verify and restrict permissions’
Details Level 1, Scorable Supportive Information The following resource is also helpful. https://workbench.cisecurity.org/files/580 This control applies to the following type...init.ora – ‘Verify permissions of file referenced by ifile parameter’
Details File permissions must be restricted to the owner of the Oracle software and the dba group. If the ifile...Installation – ‘Try to ensure that no other users are connected while installing Oracle 11g’
Details Level 1, Not Scorable Supportive Information The following resource is also helpful. https://workbench.cisecurity.org/files/580 This control applies to the following...listener.ora – ‘logging_listener = ON’
Details Logging of all listener actions will create an audit trail in the event that a listener is attacked or...