Home
Security Hardening
DISA STIG Oracle 12C V2R3 Linux

DISA STIG Oracle 12C V2R3 Linux

DISA_STIG_Oracle_Database_12c_v2r3_OS_Linux.audit from DISA Oracle Database 12c v2r3 STIG
See Also https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_12c_V2R3_STIG.zip This control applies to the following type of system Unix. Source Tenable.com/audits
O121-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.
Details It is critically important to the security of your system that you protect your password file and the environment...
O121-BP-022700 – The Oracle Listener must be configured to require administration authentication.
Details Oracle listener authentication helps prevent unauthorized administration of the Oracle listener. Unauthorized administration of the listener could lead to...
O121-BP-024100 – DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems.
Details Developer roles must not be assigned DBMS administrative privileges to production DBMS application and data directories. The separation of...
O121-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – /etc/profile umask < 022
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
O121-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – umask < 0022
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel.
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – tcp.validnode_checking=YES
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_VERSION
Details The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private...
O121-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – CLIENT
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...

DISA STIG Oracle 12C V2R3 Linux

DISA_STIG_Oracle_Database_12c_v2r3_OS_Linux.audit from DISA Oracle Database 12c v2r3 STIG

O121-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.

O121-BP-022700 – The Oracle Listener must be configured to require administration authentication.

O121-BP-024100 – DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems.

O121-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – /etc/profile umask < 022

O121-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users – umask < 0022

O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel.

O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – tcp.validnode_checking=YES

O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_VERSION

O121-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – CLIENT