Home
Security Hardening
DISA STIG Oracle 11 Installation V9R1 Linux

DISA STIG Oracle 11 Installation V9R1 Linux

DG0001-ORACLE11 – Vendor supported software is evaluated and patched against newly found vulnerabilities.
Details Unsupported software versions are not patched by vendors to address newly discovered security versions. An unpatched version is vulnerable...
DG0003-ORACLE11 – The latest security patches should be installed.
Details Maintaining the currency of the software version protects the database from known vulnerabilities. NOTE: Nessus has not performed this...
DG0005-ORACLE11 – Only necessary privileges to the host system should be granted to DBA OS accounts – ‘DBA user group members’
Details Database administration accounts are frequently granted more permissions to the local host system than are necessary. This allows inadvertent...
DG0005-ORACLE11 – Only necessary privileges to the host system should be granted to DBA OS accounts – ‘No dba account is a member of the root group’
Details Database administration accounts are frequently granted more permissions to the local host system than are necessary. This allows inadvertent...
DG0005-ORACLE11 – Only necessary privileges to the host system should be granted to DBA OS accounts – ‘root is not a member of dba groups’
Details Database administration accounts are frequently granted more permissions to the local host system than are necessary. This allows inadvertent...
DG0007-ORACLE11 – The database should be secured in accordance with DoD, vendor and/or commercially accepted practices where applicable.
Details DBMS systems that do not follow DoD, vendor and/or public best security practices are vulnerable to related published vulnerabilities....
DG0009-ORACLE11 – Access to DBMS software files and directories should not be granted to unauthorized users – ‘/etc/profile umask < 022'
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
DG0009-ORACLE11 – Access to DBMS software files and directories should not be granted to unauthorized users – ‘umask < 0022'
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
DG0010-ORACLE11 – Database executable and configuration files should be monitored for unauthorized modifications.
Details Changes to files in the DBMS software directory including executable, configuration, script, or batch files can indicate malicious compromise...
DG0011-ORACLE11 – Configuration management procedures should be defined and implemented for database software modifications.
Details Uncontrolled, untested, or unmanaged changes result in an unreliable security posture. All changes to software libraries related to the...

DISA STIG Oracle 11 Installation V9R1 Linux

DG0001-ORACLE11 – Vendor supported software is evaluated and patched against newly found vulnerabilities.

DG0003-ORACLE11 – The latest security patches should be installed.

DG0005-ORACLE11 – Only necessary privileges to the host system should be granted to DBA OS accounts – ‘DBA user group members’

DG0005-ORACLE11 – Only necessary privileges to the host system should be granted to DBA OS accounts – ‘No dba account is a member of the root group’

DG0005-ORACLE11 – Only necessary privileges to the host system should be granted to DBA OS accounts – ‘root is not a member of dba groups’

DG0007-ORACLE11 – The database should be secured in accordance with DoD, vendor and/or commercially accepted practices where applicable.

DG0009-ORACLE11 – Access to DBMS software files and directories should not be granted to unauthorized users – ‘/etc/profile umask < 022'

DG0009-ORACLE11 – Access to DBMS software files and directories should not be granted to unauthorized users – ‘umask < 0022'

DG0010-ORACLE11 – Database executable and configuration files should be monitored for unauthorized modifications.

DG0011-ORACLE11 – Configuration management procedures should be defined and implemented for database software modifications.