| O112-BP-026500 - Remote administration must be disabled for the Oracle connection manager. | DISA STIG Oracle 11.2g v2r5 Linux | Unix | CONFIGURATION MANAGEMENT |
| O112-N1-015602 - When using command-line tools such as Oracle SQL*Plus, which can accept a plain-text password, users must use an alternative login method that does not expose the password. | DISA STIG Oracle 11.2g v2r5 Linux | Unix | IDENTIFICATION AND AUTHENTICATION |
| OL6-00-000003 - The system must use a separate file system for /var/log. | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000005 - The audit system must alert designated staff members when the audit storage volume approaches capacity. | DISA STIG Oracle Linux 6 v2r7 | Unix | AUDIT AND ACCOUNTABILITY |
| OL6-00-000013 - The system package management tool must cryptographically verify the authenticity of system software packages during installation. | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000018 - A file integrity baseline must be created. | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000043 - The /etc/group file must be group-owned by root. | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000046 - Library files must be owned by a system account - '/lib64' | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000046 - Library files must be owned by a system account - '/usr/local/lib' | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000047 - All system command files must have mode 755 or less permissive - '/bin' | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000047 - All system command files must have mode 755 or less permissive - '/sbin' | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| OL6-00-000050 - The system must require passwords to contain a minimum of 15 characters - /etc/login.defs | DISA STIG Oracle Linux 6 v2r7 | Unix | IDENTIFICATION AND AUTHENTICATION |
| OL09-00-002323 - OL 9 must securely compare internal information system clocks at least every 24 hours. | DISA Oracle Linux 9 STIG v1r6 | Unix | AUDIT AND ACCOUNTABILITY |
| OL09-00-002341 - OL 9 SSH daemon must not allow Generic Security Service Application Program Interface (GSSAPI) authentication. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002343 - OL 9 SSHD must not allow blank passwords. | DISA Oracle Linux 9 STIG v1r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| OL09-00-002352 - OL 9 SSH daemon must display the date and time of the last successful account logon upon an SSH logon. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002376 - OL 9 must terminate idle user sessions. | DISA Oracle Linux 9 STIG v1r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| OL09-00-002402 - OL 9 must enable kernel parameters to enforce discretionary access control on symlinks. | DISA Oracle Linux 9 STIG v1r6 | Unix | ACCESS CONTROL |
| OL09-00-002409 - OL 9 must disable access to network bpf system call from nonprivileged processes. | DISA Oracle Linux 9 STIG v1r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| OL09-00-002410 - OL 9 must restrict usage of ptrace to descendant processes. | DISA Oracle Linux 9 STIG v1r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| OL09-00-002419 - OL 9 file systems must not contain shosts.equiv files. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002500 - OL 9 must be configured so that all system device files are correctly labeled to prevent unauthorized modification. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002501 - OL 9 must not have unauthorized accounts. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002502 - OL 9 SSH private host key files must have mode 0600 or less permissive. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002503 - OL 9 SSH public host key files must have mode 0644 or less permissive. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002508 - OL 9 SSH server configuration file must be owned by root. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002509 - OL 9 SSH server configuration file must have mode 0600 or less permissive. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002530 - OL 9 /boot/grub2/grub.cfg file must be group-owned by root. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002536 - OL 9 /etc/group file must have mode 0644 or less permissive to prevent unauthorized access. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002540 - OL 9 /etc/gshadow file must be owned by root. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002547 - OL 9 /etc/passwd- file must be owned by root. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002548 - OL 9 /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002565 - OL 9 /var/log/messages file must have mode 0640 or less permissive. | DISA Oracle Linux 9 STIG v1r6 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| OL09-00-002581 - OL 9 cron configuration files directory must be group-owned by root. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002582 - OL 9 cron configuration files directory must be owned by root. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-002583 - OL 9 /etc/crontab file must have mode 0600. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-003002 - OL 9 local interactive users must have a home directory assigned in the /etc/passwd file. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-003050 - OL 9 local interactive user home directories defined in the /etc/passwd file must exist. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-003051 - OL 9 system accounts must not have an interactive login shell. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-003052 - OL 9 local interactive user accounts must be assigned a home directory upon creation. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-003060 - OL 9 must set the umask value to 077 for all local interactive user accounts. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-003065 - OL 9 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity. | DISA Oracle Linux 9 STIG v1r6 | Unix | ACCESS CONTROL |
| OL09-00-005030 - OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-006000 - OL 9 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures on impacted network interfaces are implemented. | DISA Oracle Linux 9 STIG v1r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| OL09-00-006022 - OL 9 must log IPv4 packets with impossible addresses. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-006026 - OL 9 must not forward IPv4 source-routed packets by default. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-006027 - OL 9 must use a reverse-path filter for IPv4 network traffic, when possible, by default. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-006028 - OL 9 must not enable IPv4 packet forwarding unless the system is a router. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-006030 - OL 9 must not respond to Internet Control Message Protocol (ICMP) echoes sent to a broadcast address. | DISA Oracle Linux 9 STIG v1r6 | Unix | CONFIGURATION MANAGEMENT |
| OL09-00-900140 - OL 9 must only allow the use of DOD PKI-established certificate authorities for authentication in the establishment of protected sessions to OL 9. | DISA Oracle Linux 9 STIG v1r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
