SV-270522r1115956_rule
V-270522
SRG-APP-000516-DB-000363
O19C-00-008700
CAT II
10
Document all authorized connections from the database to remote databases.
Remove all unauthorized remote database connection definitions from the database.
From SQL*Plus:
drop database link [link name];
OR
drop public database link [link name];
Review remote database connection definitions periodically and confirm their use is still required and authorized.
If using a non-CDB database:
Use the following query to get a list of database links.
From SQL*Plus:
select owner||': '||db_link from dba_db_links;
If using a CDB database:
Use the following query to get a list of database links.
select con_id_to_con_name(con_id) con_id, owner, db_link, username, host from cdb_db_links order by 1,2,3;
Check Results:
If no rows are returned from the first SQL statement, this check is not a finding.
If there are rows returned, verify the database links are required. If they are required and exist, this is not a finding.
V-270522
False
O19C-00-008700
If using a non-CDB database:
Use the following query to get a list of database links.
From SQL*Plus:
select owner||': '||db_link from dba_db_links;
If using a CDB database:
Use the following query to get a list of database links.
select con_id_to_con_name(con_id) con_id, owner, db_link, username, host from cdb_db_links order by 1,2,3;
Check Results:
If no rows are returned from the first SQL statement, this check is not a finding.
If there are rows returned, verify the database links are required. If they are required and exist, this is not a finding.
M
5672