Skip to content

Oracle Database 12c Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • A minimum of two Oracle control files must be defined and configured to be stored on separate, archived disks (physical or virtual) or archived partitions on a RAID device.

    <VulnDiscussion>Oracle control files are used to store information critical to Oracle database integrity. Oracle uses these files to maintain...
    Rule Low Severity
  • SRG-APP-000516-DB-000363

    <GroupDescription></GroupDescription>
    Group
  • The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA or non-Application administrator user accounts.

    &lt;VulnDiscussion&gt;An account permission to grant privileges within the database is an administrative function. Minimizing the number and privil...
    Rule Medium Severity
  • SRG-APP-000516-DB-000363

    <GroupDescription></GroupDescription>
    Group
  • The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.

    &lt;VulnDiscussion&gt;Setting this value to TRUE allows operating system authentication over an unsecured connection. Trusting remote operating sys...
    Rule High Severity
  • SRG-APP-000516-DB-000363

    <GroupDescription></GroupDescription>
    Group
  • The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.

    &lt;VulnDiscussion&gt;Setting REMOTE_OS_ROLES to TRUE allows operating system groups to control Oracle roles. The default value of FALSE causes rol...
    Rule High Severity
  • SRG-APP-000516-DB-000363

    <GroupDescription></GroupDescription>
    Group
  • The Oracle SQL92_SECURITY parameter must be set to TRUE.

    &lt;VulnDiscussion&gt;The configuration option SQL92_SECURITY specifies whether table-level SELECT privileges are required to execute an update or ...
    Rule Medium Severity
  • SRG-APP-000516-DB-000363

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules