Skip to content

III - Administrative Public

Rules and Groups employed by this XCCDF Profile

  • Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

    <VulnDiscussion>To prevent the compromise of authentication information, such as passwords, during the authentication process, the feedback f...
    Rule High Severity
  • SRG-APP-000178-DB-000083

    <GroupDescription></GroupDescription>
    Group
  • When using command-line tools such as Oracle SQL*Plus, which can accept a plain-text password, users must use an alternative logon method that does not expose the password.

    &lt;VulnDiscussion&gt;The SRG states: "To prevent the compromise of authentication information, such as passwords, during the authentication proce...
    Rule High Severity
  • SRG-APP-000109-DB-000049

    <GroupDescription></GroupDescription>
    Group
  • The DBMS must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

    &lt;VulnDiscussion&gt;In order to ensure sufficient storage capacity for the audit logs, the DBMS must be able to allocate audit record storage cap...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules