STIGQter: STIG Summary: Oracle Database 12c Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

Remote database or other external access must use fully-qualified names.

DISA Rule

SV-219872r401224_rule

Vulnerability Number

V-219872

Group Title

SRG-APP-000516-DB-000363

Rule Version

O121-BP-026300

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

From SQL*Plus:

alter system set global_names = TRUE scope = spfile;

Note: This parameter, if changed, will affect all currently defined Oracle database links.

The above SQL*Plus command will set the parameter to take effect at next system startup.

Check Contents

From SQL*Plus:

select value from v$parameter where name = 'global_names';

If the value returned is FALSE, this is a finding.

Vulnerability Number

V-219872

Documentable

False

Rule Version

O121-BP-026300

Severity Override Guidance

From SQL*Plus:

select value from v$parameter where name = 'global_names';

If the value returned is FALSE, this is a finding.

Check Content Reference

M

Target Key

4059

Comments