O112-BP-022000 - The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.

Information

Setting REMOTE_OS_ROLES to TRUE allows operating system groups to control Oracle roles. The default value of FALSE causes roles to be identified and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user could impersonate another operating system user over a network connection.

Solution

Document remote OS roles in the System Security Plan.

If not required, disable use of remote OS roles.

From SQL*Plus:

alter system set remote_os_roles = FALSE scope = spfile;

The above SQL*Plus command will set the parameter to take effect at next system startup.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11-2g_V2R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-219703r961863_rule, STIG-ID|O112-BP-022000, STIG-Legacy|SV-68217, STIG-Legacy|V-53977, Vuln-ID|V-219703

Plugin: OracleDB

Control ID: abcc317d0c0530806aa590fd3878a43cbbaff76f717892d7c0c5fc06546546fa