Đang chuẩn bị liên kết để tải về tài liệu:
Center for Internet Security Benchmark for Oracle 9i/10g

CIS provides benchmarks, scoring tools, software, data, information, suggestions, ideas, and other services and materials from the CIS website or elsewhere (“Products”) as a public service to Internet users worldwide. Recommendations contained in the Products (“Recommendations”) result from a consensus-building process that involves many security experts and are generally generic in nature. The Recommendations are intended to provide helpful information to organizations attempting to evaluate or improve the security of their networks, systems and devices. Proper use of the Recommendations requires careful analysis and adaptation to specific user requirements. The Recommendations are not in any way intended to be a “quick fix” for anyone’s information. | the CENTER for INTERNET SECURITY Center for Internet Security Benchmark for Oracle 9i 10g Version 2.01 April 2005 Copyright 2005 The Center for Internet Security http www.cisecurity.org cis-feedback@cisecurity.org Table of Contents Agreed Terms of Use.1 Introduction.4 1. Operating System Specific Settings.5 2. Installation and Patch.8 3. Oracle Directory and File Permissions.11 4. Oracle Parameter Settings.16 5. Encryption Specific Settings.21 6. Startup and Shutdown.26 7. Backup and Disaster Recovery.27 8. Oracle Profile User Setup Settings.28 9. Oracle Profile User Access Settings.31 10. Enterprise Manager Grid Control Agents.36 11. 10g Specific Systems.38 12. General Policy and Procedures.39 13. Auditing Policy and Procedures.45 Appendix A - Additional Settings not scored .47 Appendix B - Disabled Windows 2000 Services.49 Appendix C - FIPS140-2 Issues.50 Appendix D - Waivers and Exceptions.51 Appendix E - Using Enterprise Manager Grid Control for Patch Management and Policy Violations.53 Appendix F - Revision .