A minimum of two Oracle control files must be defined and configured to be stored on separate, archived physical disks or archived partitions on a RAID device.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-57611	DG7002-ORACLE11	SV-72021r1_rule	DCPA-1	Medium

Description
Oracle control files are used to store information critical to Oracle database integrity. Oracle uses these files to maintain time synchronization of database files as well as at system startup to verify the validity of system data and log files. Loss of access to the control files can affect database availability, integrity, and recovery.

STIG	Date
Oracle Database 11g Installation STIG	2016-12-14

Details

Check Text ( C-58443r3_chk )
From SQL*Plus: select name from v$controlfile; DoD guidance recommends: 1. A minimum of two distinct control files for each Oracle Database Instance. 2. Each control file located on separate, archived physical storage devices. 3. Different Logical Paths for each control file at the highest level supported by your configuration; for example: UNIX: /ora03/app/oracle/{SID}/control/control01.ctl /ora04/app/oracle/{SID}/control/control02.ctl Windows: D:/oracle/{SID}/control/control01.ctl E:/oracle/{SID}/control/control02.ctl If this minimum is not met, this is a finding. Verify that the mount points or partitions referenced in the file paths indicate separate physical disks. If not, this is a finding. (This includes RAID devices and ASM storage. In the case of SAN storage and where possible, different storage pools must be used for control file locations. This assures not only that different physical disks are used but that separate higher level storage components are used.)

Check Text ( C-58443r3_chk )

From SQL*Plus:
select name from v$controlfile;

DoD guidance recommends:

1. A minimum of two distinct control files for each Oracle Database Instance.
2. Each control file located on separate, archived physical storage devices.
3. Different Logical Paths for each control file at the highest level supported by your configuration; for example:

UNIX:
/ora03/app/oracle/{SID}/control/control01.ctl
/ora04/app/oracle/{SID}/control/control02.ctl

Windows:
D:/oracle/{SID}/control/control01.ctl
E:/oracle/{SID}/control/control02.ctl

If this minimum is not met, this is a finding.

Verify that the mount points or partitions referenced in the file paths indicate separate physical disks. If not, this is a finding.

(This includes RAID devices and ASM storage. In the case of SAN storage and where possible, different storage pools must be used for control file locations. This assures not only that different physical disks are used but that separate higher level storage components are used.)

Fix Text (F-62811r2_fix)
Establish at least two Oracle control files. Specify a separate, dedicated disk/directory location for each control file.