2.2.8 Ensure 'REMOTE_OS_ROLES' Is Set to 'FALSE'

Information

The remote_os_roles setting permits remote users' OS roles to be applied to database management. This setting should have a value of FALSE

Allowing remote clients OS roles to have permissions for database management could cause privilege overlaps and generally weaken security.

Solution

To remediate this setting, execute the following SQL statement.

ALTER SYSTEM SET REMOTE_OS_ROLES = FALSE SCOPE = SPFILE;

See Also

https://workbench.cisecurity.org/benchmarks/11760