Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Oracle Database 11g Instance STIG

The Oracle Database 11g Instance STIG (V9 R1) has 94 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

94STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V9 · R1

CurrentPublished Wed Oct 27 2021

Audit records should be restricted to authorized individuals.

Oracle Database 11g Instance STIG

Assessment Title

Rule Text

Description

Discussion Text

Audit data is frequently targeted by malicious users as it can provide a means to detect their activity. The protection of the audit trail data is of special concern and requires restrictions to allow only the auditor and DBMS backup, recovery, and maintenance users access to it.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-5686

Rule

SV-24622r2_rule

Severity

medium

Rule Version

DG0032-ORACLE11

Documentable

true

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From SQL*Plus:
  select value from v$parameter where name='audit_trail';

If none of the following values is displayed, this check is Not a Finding.

Oracle 11.1 – 11.2   = 'db'
Oracle 11.1 – 11.2   = 'db_extended'

Review access granted to the AUD$ table.

From SQL*Plus:
  select grantee from dba_tab_privs
  where table_name = 'AUD$' 
  and grantee not in ('DELETE_CATALOG_ROLE')
  and grantee not in 
  (select grantee from dba_role_privs
   where granted_role = 'DBA')
  order by grantee;

View access granted to the AUD$ table against those authorized in the System Security Plan.

If any are not authorized, this is a Finding.

Implementation Procedure

Fix Text

Document and authorize accounts granted access to the AUD$ table in the System Security Plan.

Revoke access permissions granted to the AUD$ table from unauthorized users.

STIG check 94 of 94 in the Oracle Database 11g Instance STIG checklist

← Previous · V-5685Required auditing parameters for database auditing should be set.