Ensure 'SQLNET.ENCRYPTION_TYPES_SERVER' Is Set To AES256

高级别 1人工审核oracle-db

说明

The SQLNET.ENCRYPTION_TYPES_SERVER parameter specifies the encryption algorithms that the server enforces for database connections. This setting allows you to ensure that all data transmitted between the client and the database is encrypted using strong, secure algorithms. Manual in the benchmark: SQLNET.ENCRYPTION_TYPES_SERVER in sqlnet.ora should be exactly (AES256). Default: All available algorithms

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

On the Linux platform, execute the following shell command to audit this recommendation. filePath="$ORACLE_HOME/network/admin/sqlnet.ora" if grep -qi "^\s*SQLNET\.ENCRYPTION_TYPES_SERVER\s*=\s*(AES256)" "$filePath"; then # This is compliant. : elif grep -qi "^#.*SQLNET\.ENCRYPTION_TYPES_SERVER" "$filePath"; then echo "The parameter is commented out." elif grep -qi "^#.*SQLNET\.ENCRYPTION_TYPES_SERVER\s*=\s*,.*" "$filePath"; then echo "Multiple encryption types are specified." elif grep -qi "SQLNET\.ENCRYPTION_TYPES_SERVER" "$filePath"; then grep -i "SQLNET\.ENCRYPTION_TYPES_SERVER" ...

修复方式

修复方法: 操作指南或基础设施补丁

To remediate this recommendation, set SQLNET.ENCRYPTION_TYPES_SERVER to AES256. SQLNET.ENCRYPTION_TYPES_SERVER=(AES256)

属性

操作系统: 任意
标签: oracle-dbdatabaseoraclemanual
参考: CIS Oracle Database 23ai Benchmark v1.1.0 - 2.2.9 Ensure 'SQLNET.ENCRYPTION_TYPES_SERVER' Is Set To AES256