Detections
Analytics

1.43 O19C-00-010700

Information

Use of the Oracle Database installation account must be logged.

GROUP ID: V-270537
RULE ID: SV-270537r1064889

The database management system (DBMS) installation account may be used by any authorized user to perform DBMS installation or maintenance. Without logging, accountability for actions attributed to the account is lost.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Develop, document, and implement a logging procedure for use of the DBMS software installation account that provides accountability to individuals for any actions taken by the account.

Host system audit logs should be included in the DBMS account usage log along with an indication of the person who accessed the account and an explanation for the access.

Ensure all accounts with administrator privileges are monitored for DBMS host on Windows OS platforms.

See Also

https://workbench.cisecurity.org/benchmarks/26166

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-270537r1064889_rule, STIG-ID|O19C-00-010700, Vuln-ID|V-270537

Plugin: OracleDB

Control ID: dbb7fd077e5b67b9d2f912ab9f74b955f8999c9c6fe721d59a344331a60789e6