The DBMS must not share a host supporting an independent security service.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-61509	O121-BP-025300	SV-75999r1_rule		Medium

Description
The Security Support Structure is a security control function or service provided by an external system or application. An example of this would be a Windows domain controller that provides identification and authentication that can be used by other systems to control access. The associated risk of a DBMS installed on a system that provides security support is significantly higher than when installed on separate systems. In cases where the DBMS is dedicated to local support of a security support function (e.g. a directory service), separation may not be possible.

Description

The Security Support Structure is a security control function or service provided by an external system or application. An example of this would be a Windows domain controller that provides identification and authentication that can be used by other systems to control access. The associated risk of a DBMS installed on a system that provides security support is significantly higher than when installed on separate systems. In cases where the DBMS is dedicated to local support of a security support function (e.g. a directory service), separation may not be possible.

STIG	Date
Oracle Database 12c Security Technical Implementation Guide	2016-06-24

Details

Check Text ( C-62381r1_chk )
Review the services and processes active on the DBMS host system. If the host system is a Windows domain controller, this is a finding. If the host system is supporting any other security or directory services that do not use the DBMS to store information, this is a finding. Note: This does not include client security applications like firewall and antivirus software.

Fix Text (F-67425r1_fix)
Either move the DBMS installation to a dedicated host system or move the directory or security services to another host system. A dedicated host system in this case refers to an instance of the operating system at a minimum. The operating system may reside on a virtual host machine where supported by the DBMS vendor.