Detections
Analytics

2.3.6 Ensure 'OS_ROLES' Is Set To 'FALSE'

Information

The os_roles setting permits externally created groups to be applied to database management.

Allowing the OS to use external groups for database management could cause privilege overlaps and generally weaken security.

Solution

To remediate this setting, execute the following SQL statement and restart the instance.

ALTER SYSTEM SET OS_ROLES = FALSE SCOPE = SPFILE;

Note: This parameter is not modifiable at the PDB level. You must modify this parameter at the CDB level.

See Also

https://workbench.cisecurity.org/benchmarks/26139

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: OracleDB

Control ID: b5d28e50940a751c18e37af3fa55ae41bcd527d7d3b302c93a500446b13d4a84