Information
The DBMS software installation account should be restricted to authorized users.
DBA and other privileged administrative or application owner accounts are granted privileges that allow actions that can have a greater impact on database security and operation. It is especially important to grant access to privileged accounts to only those persons who are qualified and authorized to use them.
Solution
Develop, document and implement procedures to restrict use of the Oracle DBMS software installation account.
Unix environments:
Ensure that the Oracle DBMS software installation account is disabled when not in use, except in cases where this would interfere with required functionality. In such cases, prevent direct logon as the Oracle DBMS software installation account by locking its password; authorize the appropriate administrative users to operate as the Oracle DBMS software installation account via the 'su' or 'sudo' command.
Other environments:
Ensure that the Oracle DBMS software installation account is disabled when not in use.