STIGUI
V-219872CAT II — Medium severitySV-219872r961863_rule

Remote database or other external access must use fully-qualified names.

Rule version O121-BP-026300 · STIG v3 · 2025-02-12

Discussion

The Oracle GLOBAL_NAMES parameter is used to set the requirement for database link names to be the same name as the remote database whose connection they define. By using the same name for both, ambiguity is avoided and unauthorized or unintended connections to remote databases are less likely.

Check

From SQL*Plus:

select value from v$parameter where name = 'global_names';

If the value returned is FALSE, this is a finding.

Fix

From SQL*Plus:

alter system set global_names = TRUE scope = spfile;

Note: This parameter, if changed, will affect all currently defined Oracle database links.

The above SQL*Plus command will set the parameter to take effect at next system startup.

Identifiers

Group ID
V-219872
Group title
SRG-APP-000516-DB-000363
Rule ID
SV-219872r961863_rule
Check ID
C-21583r533128_chk
Fix ID
F-21582r533129_fix