OracleConnections

Oracle Community Network

Oracle Hardening

I am implementing Oracle Hardening on Oracle 8i,9i,10gR1,10gR2,11gR1,11gR2.

Can anyone help me if you have any documentation? The organisation is not ready to implement Oracle Vault.

0 members like this

▶ Reply to This

Replies to This Discussion

Permalink Reply by Issac Haycraft on May 31, 2013 at 10:54am

Your question isn't particularly clear. What, precisely, are you trying to do? Anything you do that improves security can be considered "hardening".

Have you read through the Oracle Security guide for each version of Oracle? That would be the place to start.
Are you trying to meet a particular security standard? If so, what standard?
Are you trying to implement a particular bit of functionality? If so, what functionality?

▶ Reply

Permalink Reply by Felix Moret on May 31, 2013 at 10:59am

Your question isn't particularly clear.

What, precisely, are you trying to do? Anything you do that improves security can be considered "hardening".

==> This is to improve the basic security to prevent user intrusion.

Have you read through the Oracle Security guide for each version of Oracle? That would be the place to start.

==> I have started looking into it.

Are you trying to meet a particular security standard? If so, what standard?

==> This need to very high standards such as FIPS

Are you trying to implement a particular bit of functionality? If so, what functionality?

I am looking at increasing the security standards for below:

- User Management
- Installation
- OS
- Config Level (init.ora)

Help me if you already have any document which has the check list.

▶ Reply

Permalink Reply by Issac Haycraft on May 31, 2013 at 11:16am

Again, that's not particularly specific. A checklist for securing your operating system would necessarily require that you tell us what operating system you're using. You haven't specified that. It would depend on the standards you are trying to meet, etc. There are dozens of ways to implement "user management". It's impossible to even contemplate a checklist without understanding how you are doing it. And that, in turn, will depend on the requirements you have.

There is a ton of information in the Oracle documentation. There is a ton of information on various web sites-- Pete Finnigan's would be a good place to start

http://www.petefinnigan.com/