Home
Security Hardening
DISA STIG Oracle 11 2G V2R2 Linux

DISA STIG Oracle 11 2G V2R2 Linux

O112-BP-026400 – The /diag subdirectory under the directory assigned to the DIAGNOSTIC_DEST parameter must be protected from unauthorized access – Permissions
Details /diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain...
O112-BP-026500 – Remote administration must be disabled for the Oracle connection manager.
Details Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or...
O112-BP-026600 – The SQLNet SQLNET.ALLOWED_LOGON_VERSION parameter must be set to a value of 12 or higher.
Details Unsupported Oracle network client installations may introduce vulnerabilities to the database. Restriction to use of supported versions helps to...
O112-C1-004500 – DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS – DBA group
Details This requirement is intended to limit exposure due to operating from within a privileged account or role. The inclusion...
O112-C1-011100 – Vendor-supported software must be evaluated and patched against newly found vulnerabilities.
Details Security faults with software applications and operating systems are discovered daily. Vendors are constantly updating and patching their products...
O112-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CIPHER_SUITES
Details The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private...
O112-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CLIENT_AUTHENTICATION
Details The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private...
O112-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_VERSION
Details The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private...
O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures.
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...
O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.CRYPTO_CHECKSUM_CLIENT
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...

Prev Next

DISA STIG Oracle 11 2G V2R2 Linux

O112-BP-026400 – The /diag subdirectory under the directory assigned to the DIAGNOSTIC_DEST parameter must be protected from unauthorized access – Permissions

O112-BP-026500 – Remote administration must be disabled for the Oracle connection manager.

O112-BP-026600 – The SQLNet SQLNET.ALLOWED_LOGON_VERSION parameter must be set to a value of 12 or higher.

O112-C1-004500 – DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS – DBA group

O112-C1-011100 – Vendor-supported software must be evaluated and patched against newly found vulnerabilities.

O112-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CIPHER_SUITES

O112-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CLIENT_AUTHENTICATION

O112-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_VERSION

O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures.

O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.CRYPTO_CHECKSUM_CLIENT