The Oracle OS_ROLES parameter should be set to FALSE.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-2519	DO0240-ORACLE11	SV-24881r1_rule	DCSD-1	Low

Description
The OS_ROLES parameter specifies whether Oracle roles are defined and managed by the DBMS or by the host operating system. To maintain and support the separation of duties between host system administration and DBMS administration, the DBMS must be configured to use only roles defined and managed by the DBA. Separation of duties supports assignment of privileges by job function and supports accountability.

Description

The OS_ROLES parameter specifies whether Oracle roles are defined and managed by the DBMS or by the host operating system. To maintain and support the separation of duties between host system administration and DBMS administration, the DBMS must be configured to use only roles defined and managed by the DBA. Separation of duties supports assignment of privileges by job function and supports accountability.

STIG	Date
Oracle 11 Database Instance STIG	2014-01-14

Details

Check Text ( None )
None

Fix Text (F-26462r1_fix)
From SQLPlus: alter system set os_roles = FALSE scope = spfile; The above SQLPlus command will set the parameter to take effect at next system startup.