STIGQter: STIG Summary: Oracle Database 11g Instance STIG Version: 8 Release: 20 Benchmark Date: 28 Jul 2017:

The Oracle SID should not be the default SID.

DISA Rule

SV-24868r2_rule

Vulnerability Number

V-3848

Group Title

Oracle default SID name

Rule Version

DO0221-ORACLE11

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Follow the instructions in Oracle MetaLink Note 15390.1 (and related documents) to change the SID for the database without re-creating the database to a value other than the application default.

Check Contents

From SQL*Plus:

select instance_name from v$instance;

Review the instance name with the DBA.

Ask the DBA if the instance name was chosen by the installer to conform to local naming conventions, etc. or if it was determined by the installation software.

If it was named by the installation software, this is a Finding.

Vulnerability Number

V-3848

Documentable

False

Rule Version

DO0221-ORACLE11

Severity Override Guidance

From SQL*Plus:

select instance_name from v$instance;

Review the instance name with the DBA.

Ask the DBA if the instance name was chosen by the installer to conform to local naming conventions, etc. or if it was determined by the installation software.

If it was named by the installation software, this is a Finding.

Check Content Reference

M

Responsibility

Database Administrator

Target Key

1367

Comments