Ensure 'REMOTE_OS_ROLES' Is Set To 'FALSE'

ВисокаНиво 1Аутоматскаoracle-db

Опис

The remote_os_roles setting permits remote users' OS roles to be applied to database management. This setting should have a value of FALSE. Counts non-compliant GV$SYSTEM_PARAMETER rows across instances and containers; 0 is required. Default: FALSE Run on the database host as the Oracle software owner with ORACLE_HOME, ORACLE_SID and PATH set; connects to the CDB root with 'sqlplus -S / as sysdba' (OS authentication) so CDB_/GV$ views cover all open PDBs.

Како се проверава

Метод провере: SQL упит

sql_query

out=$(sqlplus -S -L / as sysdba 2>/dev/null <<'EOF'
whenever sqlerror exit failure
set heading off feedback off pagesize 0 verify off echo off trimspool on define off
select count(*) from gv$system_parameter v
where upper(v.name) = 'REMOTE_OS_ROLES'
and upper(v.value) != 'FALSE';
exit
EOF
) || exit 1
printf '%s\n' "$out"

Очекивани излаз: 0

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

To remediate this setting, execute the following SQL statement and restart the instance. ALTER SYSTEM SET REMOTE_OS_ROLES = FALSE SCOPE = SPFILE; Note: This parameter is not modifiable at the PDB level. You must modify this parameter at the CDB level.

Својства

Оперативни системи: Било који
Ознаке: oracle-dbdatabaseoracleparameters
Референца: CIS Oracle Database 23ai Benchmark v1.1.0 - 2.3.7 Ensure 'REMOTE_OS_ROLES' Is Set To 'FALSE'

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target oracle-db