O112-BP-022000 - The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.


Setting REMOTE_OS_ROLES to TRUE allows operating system groups to control Oracle roles. The default value of FALSE causes roles to be identified and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user could impersonate another operating system user over a network connection.


Document remote OS roles in the System Security Plan.

If not required, disable use of remote OS roles.

From SQL*Plus:

alter system set remote_os_roles = FALSE scope = spfile;

The above SQL*Plus command will set the parameter to take effect at next system startup.

See Also


Item Details


References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-219703r879887_rule, STIG-ID|O112-BP-022000, STIG-Legacy|SV-68217, STIG-Legacy|V-53977, Vuln-ID|V-219703

Plugin: OracleDB

Control ID: 550816e11fa6ce521933861e3358e9c4f8000b877e4ba88802132f941ef1383c