Detections
Analytics
DG0110-ORACLE11 - The DBMS should not share a host supporting an independent security service - 'DomainRole != 4 or 5'
Information
The Security Support Structure is a security control function or service provided by an external system or application. An example of this would be a Windows domain controller that provides identification and authentication that can be used by other systems to control access. The associated risk of a DBMS installed on a system that provides security support is significantly higher than when installed on separate systems. In cases where the DBMS is dedicated to local support of a security support function (e.g. a directory service), separation may not be possible.Solution
Either move the DBMS installation to a dedicated host system or move the directory or security services to another host system.A dedicated host system in this case refers to an instance of the operating system at a minimum.
The operating system may reside on a virtual host machine where supported by the DBMS vendor.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11g_Y21M10_STIG.zip
Item Details
Audit Name: DISA STIG Oracle 11 Installation v9r1 Windows
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, Rule-ID|SV-24717r1_rule, STIG-ID|DG0110-ORACLE11, Vuln-ID|V-15179
Plugin: Windows
Control ID: e2efff8258f2d0817949ef9cdeab2ce40b5ee88abcda30a681bb37b59dc867fe