STIGQter: STIG Summary: Oracle Database 19c Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 01 Apr 2026:

A minimum of three Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device. In addition, each Oracle redo log group must have a minimum of two Oracle redo log members (files).

DISA Rule

SV-276000r1112495_rule

Vulnerability Number

V-276000

Group Title

SRG-APP-000516-DB-000363

Rule Version

O19C-00-020600

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

To define additional redo log file groups:

From SQL*Plus (Example):

alter database add logfile group 2
('diska:log2.log' ,
'diskb:log2.log') size 50K;

To add additional redo log file [members] to an existing redo log file group:

From SQL*Plus (Example):

alter database add logfile member 'diskc:log2.log'
to group 2;

Replace diska, diskb, diskc with valid, different disk drive specifications.

Replace log#.log file with valid or custom names for the log files.

Check Contents

From SQL*Plus:

-- Check to see how many Oracle redo log groups there are:
select group#, bytes, members, status, archived from v$log;

-- Check to see how many Oracle redo log members there are:
select * from v$logfile;

This is a finding if there are less than three Oracle redo log groups a RAID storage device, or equivalent storage system, is not being used.

If one or more groups (group#) has only a single member this is a finding.

If one or more groups (group#) have more than a single member but one or more of those members are located on the same physical or logical device this is a finding.

select count(*) from V$LOG;

If the value of the count returned is less than 3, this is a finding.

From SQL*Plus:

select count(*) from V$LOG where members > 1;

If the value of the count returned is less than 3 and a RAID storage device is not being used, this is a finding.

Vulnerability Number

V-276000

Documentable

False

Rule Version

O19C-00-020600

Severity Override Guidance

From SQL*Plus:

-- Check to see how many Oracle redo log groups there are:
select group#, bytes, members, status, archived from v$log;

-- Check to see how many Oracle redo log members there are:
select * from v$logfile;

This is a finding if there are less than three Oracle redo log groups a RAID storage device, or equivalent storage system, is not being used.

If one or more groups (group#) has only a single member this is a finding.

If one or more groups (group#) have more than a single member but one or more of those members are located on the same physical or logical device this is a finding.

select count(*) from V$LOG;

If the value of the count returned is less than 3, this is a finding.

From SQL*Plus:

select count(*) from V$LOG where members > 1;

If the value of the count returned is less than 3 and a RAID storage device is not being used, this is a finding.

Check Content Reference

M

Target Key

5672