DO0221-ORACLE11 - The Oracle SID should not be the default SID - 'No default instance names exist'

Information

Use of the default Oracle System Identifier (SID) leaves the database vulnerable to attacks that target Oracle installations running under default SID. Using a custom name helps protect the database against this kind of targeted attack.

Solution

Follow the instructions in Oracle MetaLink Note 15390.1 (and related documents) to change the SID for the database without re-creating the database to a value other than the application default.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11g_Y21M10_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|III, Rule-ID|SV-24868r2_rule, STIG-ID|DO0221-ORACLE11, Vuln-ID|V-3848

Plugin: OracleDB

Control ID: 76b0bb16b0f34e05b4253cff7eaf67aa32c3ee5d6d12c9addb8f93ab246f6883