Home
Security Hardening
DISA STIG Oracle 11 2G V2R2 Linux

DISA STIG Oracle 11 2G V2R2 Linux

O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...
O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...
O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.ENCRYPTION_TYPES_CLIENT
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...
O112-C1-004500 – DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS – Root group
Details This requirement is intended to limit exposure due to operating from within a privileged account or role. The inclusion...
O112-C2-011810 – Access to external executables must be disabled or restricted – ‘ORACLE_HOME/hs/admin/extproc.ora exists’
Details The Oracle external procedure capability provides use of the Oracle process account outside the operation of the DBMS process....
O112-C2-011810 – Access to external executables must be disabled or restricted – ‘run_group=nobody’
Details The Oracle external procedure capability provides use of the Oracle process account outside the operation of the DBMS process....
O112-C2-011810 – Access to external executables must be disabled or restricted – ‘run_user=nobody’
Details The Oracle external procedure capability provides use of the Oracle process account outside the operation of the DBMS process....
O112-C2-011900 – The DBMS must support the organizational requirements to specifically prohibit or restrict the use of unauthorized functions, ports, protocols, and/or services.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.ENCRYPTION_TYPES_SERVER
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...
O112-C2-001700 – The DBMS must support the disabling of network protocols deemed by the organization to be non-secure.
Details This requirement is related to remote access, but more specifically to the networking protocols allowing systems to communicate. Remote...

Prev Next

DISA STIG Oracle 11 2G V2R2 Linux

O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT

O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER

O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.ENCRYPTION_TYPES_CLIENT

O112-C1-004500 – DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS – Root group

O112-C2-011810 – Access to external executables must be disabled or restricted – ‘ORACLE_HOME/hs/admin/extproc.ora exists’

O112-C2-011810 – Access to external executables must be disabled or restricted – ‘run_group=nobody’

O112-C2-011810 – Access to external executables must be disabled or restricted – ‘run_user=nobody’

O112-C2-011900 – The DBMS must support the organizational requirements to specifically prohibit or restrict the use of unauthorized functions, ports, protocols, and/or services.

O112-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SQLNET.ENCRYPTION_TYPES_SERVER

O112-C2-001700 – The DBMS must support the disabling of network protocols deemed by the organization to be non-secure.