STIGQter: STIG Summary: Oracle Database 11g Installation STIG Version: 8 Release: 20 Benchmark Date: 28 Jul 2017:

A minimum of two Oracle control files must be defined and configured to be stored on separate, archived disks (physical or virtual) or archived partitions on a RAID device.

DISA Rule

SV-72021r2_rule

Vulnerability Number

V-57611

Group Title

Dedicated directories for DBMS control files

Rule Version

DG7002-ORACLE11

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Establish at least two Oracle control files. Specify a separate, dedicated disk/directory location for each control file.

Check Contents

From SQL*Plus:
select name from v$controlfile;

DoD guidance recommends:

1. A minimum of two distinct control files for each Oracle Database Instance.
2. Each control file located on separate, archived physical or virtual storage devices.
3. Different Logical Paths for each control file at the highest level supported by your configuration; for example:

UNIX:
/ora03/app/oracle/{SID}/control/control01.ctl
/ora04/app/oracle/{SID}/control/control02.ctl

Windows:
D:/oracle/{SID}/control/control01.ctl
E:/oracle/{SID}/control/control02.ctl

If this minimum is not met, this is a finding.

Verify that the mount points or partitions referenced in the file paths indicate separate physical disks. If not, this is a finding.

(This includes RAID devices and ASM storage. In the case of SAN storage and where possible, different storage pools must be used for control file locations. This ensures not only that different physical disks are used but that separate higher level storage components are used.)

Vulnerability Number

V-57611

Documentable

True

Rule Version

DG7002-ORACLE11

Severity Override Guidance

From SQL*Plus:
select name from v$controlfile;

DoD guidance recommends:

1. A minimum of two distinct control files for each Oracle Database Instance.
2. Each control file located on separate, archived physical or virtual storage devices.
3. Different Logical Paths for each control file at the highest level supported by your configuration; for example:

UNIX:
/ora03/app/oracle/{SID}/control/control01.ctl
/ora04/app/oracle/{SID}/control/control02.ctl

Windows:
D:/oracle/{SID}/control/control01.ctl
E:/oracle/{SID}/control/control02.ctl

If this minimum is not met, this is a finding.

Verify that the mount points or partitions referenced in the file paths indicate separate physical disks. If not, this is a finding.

(This includes RAID devices and ASM storage. In the case of SAN storage and where possible, different storage pools must be used for control file locations. This ensures not only that different physical disks are used but that separate higher level storage components are used.)

Check Content Reference

M

Target Key

1368

Comments