Only authorized system accounts should have the SYSTEM tablespace specified as the default tablespace.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3846	DO0155-ORACLE11	SV-24856r3_rule	DCPA-1	Medium

Description
The Oracle SYSTEM tablespace is used by the database to store all DBMS system objects. Other use of the system tablespace may compromise system availability and the effectiveness of host system access controls to the tablespace files.

STIG	Date
Oracle Database 11g Instance STIG	2015-06-23

Details

Check Text ( C-29413r3_chk )
From SQL*Plus: select username from dba_users where (default_tablespace = 'SYSTEM' or temporary_tablespace = 'SYSTEM') and username not in ('AURORA$JIS$UTILITY$','AURORA$ORB$UNAUTHENTICATED', 'DBSNMP','MDSYS','ORDPLUGINS','ORDSYS','OSE$HTTP$ADMIN', 'OUTLN','REPADMIN','SYS','SYSTEM','TRACESVR','MTSSYS','DIP','MGMT_VIEW'); If any non-default account records are returned, this is a Finding.

Fix Text (F-26440r2_fix)
Create and dedicate tablespaces to support only one application. Do not share tablespaces between applications. Do not grant quotas to application object owners on tablespaces not dedicated to their associated application. From SQL*Plus: alter user [username] default tablespace [tablespace_name] temporary tablespace TEMP; Replace [username] with the named user account. Replace [tablespace_name] with the new default tablespace name.

Fix Text (F-26440r2_fix)

Create and dedicate tablespaces to support only one application.

Do not share tablespaces between applications.

Do not grant quotas to application object owners on tablespaces not dedicated to their associated application.

From SQL*Plus:

alter user [username] default tablespace [tablespace_name] temporary tablespace TEMP;

Replace [username] with the named user account.

Replace [tablespace_name] with the new default tablespace name.