Home
Security Hardening
DISA STIG Oracle 11 Installation V9R1 Windows

DISA STIG Oracle 11 Installation V9R1 Windows

DG0012-ORACLE11 – Database software directories including DBMS configuration files are stored in dedicated directories separate from the host OS and other applications – ‘ORACLE_BASE environment variable set’
Details Multiple applications can provide a cumulative negative effect. A vulnerability and subsequent exploit to one application can lead to...
DG0012-ORACLE11 – Database software directories including DBMS configuration files are stored in dedicated directories separate from the host OS and other applications – ‘ORACLE_HOME environment variable set’
Details Multiple applications can provide a cumulative negative effect. A vulnerability and subsequent exploit to one application can lead to...
DG0013-ORACLE11 – Database backup procedures should be defined, documented and implemented.
Details Database backups provide the required means to restore databases after compromise or loss. Backups help reduce the vulnerability to...
DG0016-ORACLE11 – Unused database components, database application software, and database objects should be removed from the DBMS system.
Details Unused, unnecessary DBMS components increase the attack surface for the DBMS by introducing additional targets for attack. By minimizing...
DG0019-ORACLE11 – Application software should be owned by a Software Application account – ‘Oracle base directory file permissions are correct’
Details File and directory ownership imparts full privileges to the owner. These privileges should be restricted to a single, dedicated...
DG0019-ORACLE11 – Application software should be owned by a Software Application account – ‘Oracle home directory file permissions are correct’
Details File and directory ownership imparts full privileges to the owner. These privileges should be restricted to a single, dedicated...
DG0020-ORACLE11 – Backup and recovery procedures should be developed, documented, implemented and periodically tested.
Details Problems with backup procedures or backup media may not be discovered until after a recovery is needed. Testing and...
DG0021-ORACLE11 – A baseline of database application software should be documented and maintained.
Details Without maintenance of a baseline of current DBMS application software, monitoring for changes cannot be complete and unauthorized changes...
DG0025-ORACLE11 – DBMS cryptography must be NIST FIPS 140-2 validated – ‘Oracle Advanced Security is installed’
Details Use of cryptography to provide confidentiality and non-repudiation is not effective unless strong methods are employed with its use....
DG0025-ORACLE11 – DBMS cryptography must be NIST FIPS 140-2 validated – ‘%ORACLE_HOME%NETWORKADMINSQLNET.ora SQLNET.SSLFIPS_140 = TRUE’
Details Use of cryptography to provide confidentiality and non-repudiation is not effective unless strong methods are employed with its use....

Prev Next

DISA STIG Oracle 11 Installation V9R1 Windows

DG0012-ORACLE11 – Database software directories including DBMS configuration files are stored in dedicated directories separate from the host OS and other applications – ‘ORACLE_BASE environment variable set’

DG0012-ORACLE11 – Database software directories including DBMS configuration files are stored in dedicated directories separate from the host OS and other applications – ‘ORACLE_HOME environment variable set’

DG0013-ORACLE11 – Database backup procedures should be defined, documented and implemented.

DG0016-ORACLE11 – Unused database components, database application software, and database objects should be removed from the DBMS system.

DG0019-ORACLE11 – Application software should be owned by a Software Application account – ‘Oracle base directory file permissions are correct’

DG0019-ORACLE11 – Application software should be owned by a Software Application account – ‘Oracle home directory file permissions are correct’

DG0020-ORACLE11 – Backup and recovery procedures should be developed, documented, implemented and periodically tested.

DG0021-ORACLE11 – A baseline of database application software should be documented and maintained.

DG0025-ORACLE11 – DBMS cryptography must be NIST FIPS 140-2 validated – ‘Oracle Advanced Security is installed’

DG0025-ORACLE11 – DBMS cryptography must be NIST FIPS 140-2 validated – ‘%ORACLE_HOME%NETWORKADMINSQLNET.ora SQLNET.SSLFIPS_140 = TRUE’