Home
Security Hardening
DISA STIG Oracle 11 2G V2R2 Windows

DISA STIG Oracle 11 2G V2R2 Windows

DISA_STIG_Oracle_Database_11.2g_v2r2_OS_Windows.audit from DISA Oracle Database 11.2g v2r2 STIG
See Also https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11-2g_V2R2_STIG.zip This control applies to the following type of system Windows. Source Tenable.com/audits
O112-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.
Details It is critically important to the security of your system that you protect your password file and the environment...
O112-BP-022700 – The Oracle Listener must be configured to require administration authentication.
Details Oracle listener authentication helps prevent unauthorized administration of the Oracle listener. Unauthorized administration of the listener could lead to...
O112-BP-025101 – The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files.
Details The AUDIT_FILE_DEST parameter specifies the directory where the database audit trail file is stored (when AUDIT_TRAIL parameter is set...
O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘/etc/profile umask < 022'
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘umask < 0022'
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.INVITED_NODES
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.VALIDNODE_CHECKING
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O112-BP-026500 – Remote administration must be disabled for the Oracle connection manager.
Details Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or...
O112-BP-026600 – The SQLNet SQLNET.ALLOWED_LOGON_VERSION parameter must be set to a value of 12 or higher.
Details Unsupported Oracle network client installations may introduce vulnerabilities to the database. Restriction to use of supported versions helps to...

DISA STIG Oracle 11 2G V2R2 Windows

DISA_STIG_Oracle_Database_11.2g_v2r2_OS_Windows.audit from DISA Oracle Database 11.2g v2r2 STIG

O112-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.

O112-BP-022700 – The Oracle Listener must be configured to require administration authentication.

O112-BP-025101 – The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files.

O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘/etc/profile umask < 022'

O112-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – ‘umask < 0022'

O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.INVITED_NODES

O112-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – TCP.VALIDNODE_CHECKING

O112-BP-026500 – Remote administration must be disabled for the Oracle connection manager.

O112-BP-026600 – The SQLNet SQLNET.ALLOWED_LOGON_VERSION parameter must be set to a value of 12 or higher.