CIS STIG

admin

The ORA_CIS_PROFILE user profile is designed for Center for Internet Security (CIS) compliance.                        
The ORA_CIS_PROFILE user profile addresses CIS requirements such as the need for a password complexity function, maximum failed login attempts, reuse time, and other requirements. The definition for this profile is as follows:

1. CREATE PROFILE ORA_CIS_PROFILE
   
2.    sessions_per_user 10
   
3.    failed_login_attempts 5
   
4.    password_life_time 90
   
5.    password_reuse_time 365
   
6.    password_reuse_max 20
   
7.    password_lock_time 1
   
8.    password_grace_time 5
   
9.    inactive_account_time 120
   
10.    password_verify_function ora12c_verify_function;
    

复制代码

The ORA_STIG_PROFILE user profile complies with the Security Technical Implementation Guide's requirements.                        
The ORA_STIG_PROFILE user profile addresses STIG requirements such as the need for a password complexity function, maximum failed login attempts, reuse time, and other requirements. The definition for this profile is as follows:

1. CREATE PROFILE ORA_STIG_PROFILE
   
2.   password_life_time        35
   
3.   password_grace_time       0
   
4.   password_reuse_time       175
   
5.   password_reuse_max        5
   
6.   failed_login_attempts     3
   
7.   password_lock_time        unlimited
   
8.   inactive_account_time     35
   
9.   idle_time                 15
   
10.   password_verify_function  ora12c_stig_verify_function;

复制代码