STIGQter: STIG Summary: Oracle Database 11g Instance STIG Version: 8 Release: 20 Benchmark Date: 28 Jul 2017:

The Oracle REMOTE_OS_AUTHENT parameter should be set to FALSE.

DISA Rule

SV-24911r2_rule

Vulnerability Number

V-2554

Group Title

Oracle REMOTE_OS_AUTHENT parameter

Rule Version

DO3538-ORACLE11

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Document remote OS authentication in the System Security Plan.

If not required or not mitigated to an acceptable level, disable remote OS authentication.

From SQL*Plus:

alter system set remote_os_authent = FALSE scope = spfile;

The above SQL*Plus command will set the parameter to take effect at next system startup.

Check Contents

From SQL*Plus:

select value from v$parameter where name = 'remote_os_authent';

If the value returned does not equal FALSE, this is a Finding.

Vulnerability Number

V-2554

Documentable

False

Rule Version

DO3538-ORACLE11

Severity Override Guidance

From SQL*Plus:

select value from v$parameter where name = 'remote_os_authent';

If the value returned does not equal FALSE, this is a Finding.

Check Content Reference

M

Responsibility

Database Administrator

Target Key

1367

Comments