CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS Unix

Audit Details

Name: CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS Unix

Updated: 6/23/2026

Authority: CIS

Plugin: Unix

Revision: 1.0

Estimated Item Count: 17

File Details

Filename: CIS_Oracle_Database_26ai_v1.0.0_L1_RDBMS_On_Linux_Host_OS_Unix.audit

Size: 47.1 kB

MD5: ec2939368657e1d76d53504fe7ecf665
SHA256: 253c76f0cde5a87c1a223199489019c5df4710ae6a2818a037e4ad8e9b442fb1

Audit Items

DescriptionCategories
2.1.1 Ensure 'extproc' Is Not Present In 'listener.ora'

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.1.2 Ensure 'ACCEPT_MD5_CERTS' Is Configured Correctly

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.1.3 Ensure 'ACCEPT_SHA1_CERTS' Is Configured Correctly

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.1.4 Ensure 'ALLOWED_WEAK_CERT_ALGORITHMS' Is NOT Set.

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.1 Ensure 'ACCEPT_MD5_CERTS' Is NOT SET

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.2 Ensure 'ACCEPT_SHA1_CERTS' Is NOT Set

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.3 Ensure 'ALLOWED_WEAK_CERT_ALGORITHMS' Is NOT Set

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.4 Ensure 'SQLNET.ALLOWED_LOGON_VERSION_CLIENT' Is Set To 12a

CONFIGURATION MANAGEMENT

2.2.5 Ensure 'SQLNET.ALLOWED_LOGON_VERSION_SERVER' Is Set To 12a

CONFIGURATION MANAGEMENT

2.2.6 Ensure 'SQLNET.ENCRYPTION_CLIENT Is Set To 'REQUIRED'

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.7 Ensure 'SQLNET.ENCRYPTION_SERVER' Is Set To 'REQUIRED'

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.8 Ensure 'SQLNET.ENCRYPTION_TYPES_CLIENT' Is Set To 'AES256'

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.9 Ensure 'SQLNET.ENCRYPTION_TYPES_SERVER' Is Set To AES256

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.10 Ensure 'SQLNET.CRYPTO_CHECKSUM_CLIENT' Is Set To 'REQUIRED'

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.11 Ensure 'SQLNET.CRYPTO_CHECKSUM_SERVER' Is Set To 'REQUIRED'

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.12 Ensure 'SSL_CERT_REVOCATION' Is Set To 'REQUIRED'

ACCESS CONTROL

CIS_Oracle_Database_26ai_v1.0.0_L1_RDBMS_On_Linux_Host_OS_Unix.audit from CIS Oracle Database 26ai v1.0.0