An error occurred:

Oracle Database 12c STIG

Oracle Database 12c Security Technical Implementation Guide

ID Vuln ID Title Cat Status
O121-C2-006600 V-237715 Databases utilizing Discretionary Access Control (DAC) must enforce a policy that limits propagation of access rights. Cat II
O121-C2-006700 V-237716 A DBMS utilizing Discretionary Access Control (DAC) must enforce a policy that includes or excludes access to the granularity of a single user. Cat II
O121-C2-006800 V-220267 The DBMS must provide audit record generation capability for organization-defined auditable events within the database. Cat II
O121-C2-006900 V-220268 The DBMS must allow designated organizational personnel to select which auditable events are to be audited by the database. Cat II
O121-C2-007000 V-220269 The DBMS must generate audit records for the DoD-selected list of auditable events, to the extent such information is available. Cat II
O121-C2-007400 V-220270 The DBMS must produce audit records containing sufficient information to establish what type of events occurred. Cat II
O121-C2-007500 V-220271 The DBMS must produce audit records containing sufficient information to establish when (date and time) the events occurred. Cat II
O121-C2-007600 V-220272 The DBMS must produce audit records containing sufficient information to establish where the events occurred. Cat II
O121-C2-007700 V-220273 The DBMS must produce audit records containing sufficient information to establish the sources (origins) of the events. Cat II
O121-C2-007800 V-220274 The DBMS must produce audit records containing sufficient information to establish the outcome (success or failure) of the events. Cat II
O121-C2-007900 V-220275 The DBMS must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event. Cat II
O121-C2-008000 V-220276 The DBMS must include organization-defined additional, more detailed information in the audit records for audit events identified by type, location, or subject. Cat II
O121-C2-008200 V-237717 The DBMS itself, or the logging or alerting mechanism the application utilizes, must provide a warning when allocated audit record storage volume reaches an organization-defined percentage of maximum audit record storage capacity. Cat II
O121-C2-008300 V-237718 The system must provide a real-time alert when organization-defined audit failure events occur. Cat II
O121-C2-009300 V-220277 The system must protect audit information from any type of unauthorized access. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.