2.2.17 Ensure 'PDB_OS_CREDENTIAL' is NOT null

Information

The pdb_os_credential setting determines what OS user will be utilized to run jobs at the OS level from within the Oracle database.

Rationale:

Permitting a job to run at the OS level with default credential, Oracle OS user, can allow for excessive privileges that a job should not have.

Solution

Using the DBMS_CREDENTIAL package, ensure credentials are set for stand alone, container and pluggable databases.

See Also

https://workbench.cisecurity.org/benchmarks/13413

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2

Plugin: OracleDB

Control ID: 94e1b839a05673b1ae2b734f2e9d367a7da1d885a43c5cb8abb6a960703ebc21