Windows Oracle Domain Account Logon to…Value – ‘Limit to machine running Oracle services’
Details The RSA must have limited access requirements and be limited to authentication to the Oracle server. Level 1, Scorable...
- Home
- Security Hardening
- CIS V1.1.0 Oracle 11G OS Windows L1
CIS V1.1.0 Oracle 11G OS Windows L1
Windows Oracle Domain Account – ‘Use Restricted Service Account (RSA)’
Details If the Oracle services require domain resources, then the server must be a domain server and the Oracle services...Windows Oracle Domain Global Group – ‘Create a global group for the RSA and make it the RSA’s primary group’
Details The RSA should not have access to resources that all domain users need to access. Level 1, Not Scorable...Windows Oracle Domain Network Resource Permissions – ‘Verify and set permissions’
Details The RSA must have limited accss requirements. Level 1, Not Scorable NOTE: Nessus has not performed this check. Please...Windows Oracle Local Account – ‘Use Restricted Service Account (RSA)’
Details Adding an additional administrative account to the system increases the attack surface of the Windows server. Creating a local...Windows Oracle Registry Key Permissions – ‘Verify and set permissions’
Details Access to the Oracle registry key must be limited to those users that require it. Unrestricted access to the...Windows platform – ‘Do not install Oracle on a domain controller’
Details This action will reduce the attack surface of the Domain Controller and the Oracle server. Level 1, Scorable Supportive...Windows Program Folder Permissions – ‘Verify and set permissions’
Details The Oracle program installation folder must allow only limited access. Global access or unrestricted folder permissions will allow an...Windows Oracle Registry Key Setting – ‘Set OSAUTH_PREFIX_DOMAIN registry value to TRUE’
Details This configuration strengthens the authentication process by requiring that the domain name be part of the username for externally...xsqlconfig.xml – ‘Verify and set permissions’
Details File permissions must be restricted to the owner of the Oracle software and the dba group Level 1, Scorable...