STIGQter STIGQter: STIG Summary: Oracle Database 11g Installation STIG Version: 8 Release: 20 Benchmark Date: 28 Jul 2017:

DBMS privileges to restore database data or other DBMS configurations, features, or objects should be restricted to authorized DBMS accounts.

DISA Rule

SV-24635r2_rule

Vulnerability Number

V-15107

Group Title

DBMS restore permissions

Rule Version

DG0063-ORACLE11

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Utilize DBMS roles that are authorized for database restore functions.

Restrict assignment of restore privileges.

Assign DBMS restoration roles only to authorized DBMS accounts.

Document assignments in the System Security Plan.

Check Contents

Review DBMS accounts with elevated permissions (accounts granted ROLE permissions, DBA accounts, SCHEMA accounts, etc.).

If any accounts are not documented and authorized for RESTORE permissions, this is a Finding.

Vulnerability Number

V-15107

Documentable

True

Rule Version

DG0063-ORACLE11

Severity Override Guidance

Review DBMS accounts with elevated permissions (accounts granted ROLE permissions, DBA accounts, SCHEMA accounts, etc.).

If any accounts are not documented and authorized for RESTORE permissions, this is a Finding.

Check Content Reference

M

Responsibility

Database Administrator

Target Key

1368

Comments