Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • The directories assigned to the LOG_ARCHIVE_DEST* parameters must be protected from unauthorized access.

    <VulnDiscussion>The LOG_ARCHIVE_DEST parameter is used to specify the directory to which Oracle archive logs are written. Where the DBMS avai...
    Rule Medium Severity
  • SRG-APP-000516-DB-000363

    <GroupDescription></GroupDescription>
    Group
  • The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to FALSE.

    &lt;VulnDiscussion&gt;The _TRACE_FILES_PUBLIC parameter is used to make trace files used for debugging database applications and events available t...
    Rule Medium Severity
  • SRG-APP-000516-DB-000363

    <GroupDescription></GroupDescription>
    Group
  • Application object owner accounts must be disabled when not performing installation or maintenance actions.

    &lt;VulnDiscussion&gt;Object ownership provides all database object permissions to the owned object. Access to the application object owner account...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules