Home
Security Hardening
DISA STIG Oracle 11 Installation V9R1 Windows

DISA STIG Oracle 11 Installation V9R1 Windows

DG0025-ORACLE11 – DBMS cryptography must be NIST FIPS 140-2 validated – ‘%ORACLE_HOME%NETWORKADMINSQLNET.ora SSL_CIPHER_SUITES set to valid cipher suite’
Details Use of cryptography to provide confidentiality and non-repudiation is not effective unless strong methods are employed with its use....
DG0040-ORACLE11 – The DBMS software installation account should be restricted to authorized users – ‘Oracle base directory file permissions are correct’
Details DBA and other privileged administrative or application owner accounts are granted privileges that allow actions that can have a...
DG0040-ORACLE11 – The DBMS software installation account should be restricted to authorized users – ‘Oracle home directory file permissions are correct’
Details DBA and other privileged administrative or application owner accounts are granted privileges that allow actions that can have a...
DG0017-ORACLE11 – A production DBMS installation should not coexist on the same DBMS host with other, non-production DBMS installations – ‘All Oracle instances are documented and approved’
Details Production, development and other non-production DBMS installations have different access and security requirements. Shared production/non-production DBMS installations secured at...
DG0064-ORACLE11 – DBMS backup and restoration files should be protected from unauthorized access.
Details Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also...
DG0066-ORACLE11 – Procedures for establishing temporary passwords that meet DoD password requirements for new accounts should be defined, documented and implemented.
Details New accounts authenticated by passwords that are created without a password or with an easily guessed password are vulnerable...
DG0067-ORACLE11 – Database account passwords should be stored in encoded or encrypted format whether stored in database objects, external host files, environment variables or any other storage locations.
Details Database passwords stored in clear text are vulnerable to unauthorized disclosure. Database passwords should always be encoded or encrypted...
DG0041-ORACLE11 – Use of the DBMS installation account should be logged.
Details The DBMS installation account may be used by any authorized user to perform DBMS installation or maintenance. Without logging,...
DG0042-ORACLE11 – Use of the DBMS software installation account should be restricted to DBMS software installation, upgrade and maintenance actions.
Details The DBMS software installation account is granted privileges not required for DBA or other functions. Use of accounts configured...
DG0050-ORACLE11 – Database software, applications and configuration files should be monitored to discover unauthorized changes.
Details Unmanaged changes that occur to the database software libraries or configuration can lead to unauthorized or compromised installations. NOTE:...

Prev Next

DISA STIG Oracle 11 Installation V9R1 Windows

DG0025-ORACLE11 – DBMS cryptography must be NIST FIPS 140-2 validated – ‘%ORACLE_HOME%NETWORKADMINSQLNET.ora SSL_CIPHER_SUITES set to valid cipher suite’

DG0040-ORACLE11 – The DBMS software installation account should be restricted to authorized users – ‘Oracle base directory file permissions are correct’

DG0040-ORACLE11 – The DBMS software installation account should be restricted to authorized users – ‘Oracle home directory file permissions are correct’

DG0017-ORACLE11 – A production DBMS installation should not coexist on the same DBMS host with other, non-production DBMS installations – ‘All Oracle instances are documented and approved’

DG0064-ORACLE11 – DBMS backup and restoration files should be protected from unauthorized access.

DG0066-ORACLE11 – Procedures for establishing temporary passwords that meet DoD password requirements for new accounts should be defined, documented and implemented.

DG0067-ORACLE11 – Database account passwords should be stored in encoded or encrypted format whether stored in database objects, external host files, environment variables or any other storage locations.

DG0041-ORACLE11 – Use of the DBMS installation account should be logged.

DG0042-ORACLE11 – Use of the DBMS software installation account should be restricted to DBMS software installation, upgrade and maintenance actions.

DG0050-ORACLE11 – Database software, applications and configuration files should be monitored to discover unauthorized changes.