Detections
Analytics
DG0017-ORACLE11 - A production DBMS installation should not coexist on the same DBMS host with other, non-production DBMS installations.
Information
Production, development and other non-production DBMS installations have different access and security requirements. Shared production/non-production DBMS installations secured at a production-level can impede development efforts whereas production/non-production DBMS installations secured at a development-level can lead to exploitation of production-level installations. Production DBMS installations should be kept separate from development, QA, TEST and other non-production DBMS systems.Solution
Recommend establishing a dedicated DBMS host for production DBMS installations (See Checks DG0109 and DG0110).A dedicated host system in this case refers to an instance of the operating system at a minimum.
The operating system may reside on a virtual host machine where supported by the DBMS vendor.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11g_Y21M10_STIG.zip
Item Details
Audit Name: DISA STIG Oracle 11 Installation v9r1 Linux
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-4(1), CAT|II, Rule-ID|SV-24606r1_rule, STIG-ID|DG0017-ORACLE11, Vuln-ID|V-3803
Plugin: Unix
Control ID: ccfd05c1e4fe8a1997aeb8b8b9e046a43cfd01074f5b56bdd0479c1e72ea5ea9