Home
Security Hardening
DISA STIG Oracle 11 2G V2R2 Linux

DISA STIG Oracle 11 2G V2R2 Linux

DISA_STIG_Oracle_Database_11.2g_v2r2_OS_Linux.audit from DISA Oracle Database 11.2g v2r2 STIG
See Also https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11-2g_V2R2_STIG.zip This control applies to the following type of system Unix. Source Tenable.com/audits
O112-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.
Details It is critically important to the security of your system that you protect your password file and the environment...
O112-BP-022700 – The Oracle Listener must be configured to require administration authentication.
Details Oracle listener authentication helps prevent unauthorized administration of the Oracle listener. Unauthorized administration of the listener could lead to...
O112-BP-025101 – The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files – ‘AUDIT_FILE_DEST not in ORACLEHOME’
Details The AUDIT_FILE_DEST parameter specifies the directory where the database audit trail file is stored (when AUDIT_TRAIL parameter is set...
O112-BP-025101 – The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files – ‘AUDIT_FILE_DEST Permissions’
Details The AUDIT_FILE_DEST parameter specifies the directory where the database audit trail file is stored (when AUDIT_TRAIL parameter is set...
O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘/etc/profile umask < 022'
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘umask < 0022'
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.INVITED_NODES
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.VALIDNODE_CHECKING
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O112-BP-026400 – The /diag subdirectory under the directory assigned to the DIAGNOSTIC_DEST parameter must be protected from unauthorized access – Ownership
Details /diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain...

DISA STIG Oracle 11 2G V2R2 Linux

DISA_STIG_Oracle_Database_11.2g_v2r2_OS_Linux.audit from DISA Oracle Database 11.2g v2r2 STIG

O112-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.

O112-BP-022700 – The Oracle Listener must be configured to require administration authentication.

O112-BP-025101 – The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files – ‘AUDIT_FILE_DEST not in ORACLEHOME’

O112-BP-025101 – The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files – ‘AUDIT_FILE_DEST Permissions’

O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘/etc/profile umask < 022'

O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘umask < 0022'

O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.INVITED_NODES

O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.VALIDNODE_CHECKING

O112-BP-026400 – The /diag subdirectory under the directory assigned to the DIAGNOSTIC_DEST parameter must be protected from unauthorized access – Ownership