Remote database or other external access must use fully-qualified names.
An XCCDF Rule
Description
<VulnDiscussion>The Oracle GLOBAL_NAMES parameter is used to set the requirement for database link names to be the same name as the remote database whose connection they define. By using the same name for both, ambiguity is avoided and unauthorized or unintended connections to remote databases are less likely.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-219743r879887_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
From SQL*Plus:
alter system set global_names = TRUE scope = spfile;
NOTE: This parameter, if changed, will affect all currently defined Oracle database links.