O121-BP-021400 - Fixed user and public database links must be authorized for use.

Information

Database links define connections that may be used by the local database to access remote Oracle databases. These links provide a means for a compromise to the local database to spread to remote databases in the distributed database environment. Limiting or eliminating use of database links where they are not required to support the operational system can help isolate compromises to the local or a limited number of databases.

Solution

Document all authorized connections from the database to remote databases in the System Security Plan.

Remove all unauthorized remote database connection definitions from the database.

From SQL*Plus:

drop database link [link name];
OR
drop public database link [link name];

Review remote database connection definitions periodically and confirm their use is still required and authorized.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_12c_V2R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-219826r879887_rule, STIG-ID|O121-BP-021400, STIG-Legacy|SV-75905, STIG-Legacy|V-61415, Vuln-ID|V-219826

Plugin: OracleDB

Control ID: 66d0c4b95c9eb812be12a3bc6368cec8c0706ca7927d3dd856de2d41579b156b