UCF STIG Viewer Logo

The DBMS must not share a host supporting an independent security service.


Overview

Finding ID Version Rule ID IA Controls Severity
V-61509 O121-BP-025300 SV-75999r1_rule Medium
Description
The Security Support Structure is a security control function or service provided by an external system or application. An example of this would be a Windows domain controller that provides identification and authentication that can be used by other systems to control access. The associated risk of a DBMS installed on a system that provides security support is significantly higher than when installed on separate systems. In cases where the DBMS is dedicated to local support of a security support function (e.g. a directory service), separation may not be possible.
STIG Date
Oracle Database 12c Security Technical Implementation Guide 2015-12-21

Details

Check Text ( C-62381r1_chk )
Review the services and processes active on the DBMS host system.

If the host system is a Windows domain controller, this is a finding.

If the host system is supporting any other security or directory services that do not use the DBMS to store information, this is a finding.

Note: This does not include client security applications like firewall and antivirus software.
Fix Text (F-67425r1_fix)
Either move the DBMS installation to a dedicated host system or move the directory or security services to another host system.

A dedicated host system in this case refers to an instance of the operating system at a minimum.

The operating system may reside on a virtual host machine where supported by the DBMS vendor.