2.2.3 Ensure 'GLOBAL_NAMES' Is Set to 'TRUE'

Information

The global_names setting requires that the name of a database link matches that of the remote database it will connect to. This setting should have a value of TRUE

Not requiring database connections to match the domain that is being called remotely could allow unauthorized domain sources to potentially connect via brute-force tactics.

Solution

To remediate this setting, execute the following SQL statement.

ALTER SYSTEM SET GLOBAL_NAMES = TRUE SCOPE = SPFILE;

See Also

https://workbench.cisecurity.org/benchmarks/11760

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: OracleDB

Control ID: 8a16f6a1e5d0c776e632cdcf5e4dd3e91ce2f7a4443da1165e31add5c07f965e