Evaluated Configuration for Oracle Database 10G Release 1 (10.1.0)
Total Page:16
File Type:pdf, Size:1020Kb
Evaluated Configuration for Oracle Database 10g Release 1 (10.1.0) November 2005 Security Evaluations Oracle Corporation 500 Oracle Parkway Redwood Shores, CA 94065 Evaluated Configuration for Oracle Database 10g i Release 1 (10.1.0) November 2005 Issue 0.5 Evaluated Configuration for Oracle Database 10g Release 1 (10.1.0) November 2005 Author: Saad Syed Contributors: Peter Goatly, Shaun Lee This document is based on the equivalent document for Oracle9i Release 2, Issue 1.0 [ECD_10] used in the last Common Criteria Evaluation of Oracle9i. The contributions of the many authors of the precursors to this document are acknowledged. Change bars indicate changes made relative to [ECD_10]. Copyright © 1999, 2005, Oracle Corporation. All rights reserved.This documentation contains proprietary information of Oracle Corporation; it is protected by copyright law. Reverse engineering of the software is prohibited. If this documentation is delivered to a U.S. Government Agen- cy of the Department of Defense, then it is delivered with Restricted Rights and the following legend is applicable: RESTRICTED RIGHTS LEGEND Use, duplication or disclosure by the Government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of DFARS 252.227-7013, Rights in Technical Data and Computer Software (October 1988). Oracle Corporation, 500 Oracle Parkway, Redwood City, CA 94065. The information in this document is subject to change without notice. If you find any problems in the documentation, please report them to us in writing. Oracle Corporation does not warrant that this document is error free. Oracle is a registered trademark and Oracle Database 10g, Oracle9i, PL/SQL, Oracle Enterprise Manager, Oracle Call Interface, SQL*Plus, SQL*Loader, Oracle Net and Oracle Label Security are trademarks or registered trademarks of Oracle Corporation. Other names may be trademarks of their respective owners. ii Evaluated Configuration for Oracle Database 10g Release 1 (10.1.0) November 2005 Issue 0.5 Contents 1 Introduction...........................................................................1 1.1 Intended Audience..........................................................................1 1.2 Organization...................................................................................1 1.3 Format ............................................................................................2 2 Physical Configuration ........................................................3 2.1 Physical Environmental Assumptions............................................3 2.2 Supporting Procedures ...................................................................3 3 Host Configuration...............................................................7 3.1 Red Hat Enterprise Linux Server Operating System .....................7 3.2 Network Services ...........................................................................8 3.3 Client Applications.........................................................................8 4 Oracle Configuration............................................................9 4.1 O-RDBMS Server ..........................................................................9 4.2 Oracle Network Services..............................................................14 5 Step by Step Guide.............................................................15 5.1 Operating System Installation / Configuration.............................15 5.2 Oracle Database 10g Server Installation / Configuration.............15 5.3 Installation of Patch Set for Oracle Database 10g (10.1.0.4).......18 Evaluated Configuration for Oracle Database 10g iii Release 1 (10.1.0) November 2005 Issue 0.5 Contents 5.4 Installation of Critical Patch Update July 2005 ........................... 18 5.5 Configuration of Oracle Database 10g RDBMS ......................... 19 5.6 Client Installation......................................................................... 20 5.7 Oracle Client Applications........................................................... 20 A Password Profile Controls................................................23 B TOE Components ..............................................................29 C Red Hat Linux Packages...................................................41 D References .........................................................................51 iv Evaluated Configuration for Oracle Database 10g Release 1 (10.1.0) November 2005 Issue 0.5 CHAPTER 1 Introduction The Target of Evaluation (TOE) is the Oracle Database 10g Release 1 (10.1.0.4.0) Object-Relational Database Management System (O-RDBMS). The TOE is hosted on the Red Hat Linux AS (version 3) operating system platform. This Evaluated Configuration for Oracle Database 10g document explains the man- ner in which the TOE must be configured along with the host operating system and network services so as to provide the security functionality and assurance as required under the Common Criteria for Information Technology Security Evaluation [CC]. The assumptions and procedures stated in the document are all (by and large) intended to remove potential vulnerabilities or attack paths from the TOE in its environment. They do not have any impact on the correct implementation of the SFs. The Evaluation Assurance Level for the TOE is EAL4 augmented with ALC_FLR.3. The Protection Profile used for the evaluation of the TOE is the Database Management System Protection Profile [DBPP]. The Security Target used for the evaluation of the TOE is [ST]. 1.1 Intended Audience The intended audience for this document includes evaluators of the TOE, system in- tegrators who will be integrating the TOE into systems, and accreditors of the systems into which the TOE has been integrated. 1.2 Organization This document is composed of the following sections: Chapter 1 contains the introduction to the document; Chapter 2 describes the physical environment of the TOE and the network serv- ices required to support the TOE; Chapter 3 describes the host operating system, network services, and client ap- plication configurations required to support the TOE; Evaluated Configuration for Oracle Database 10g 1 Release 1 (10.1.0) November 2005 Issue 0.5 Chapter 4 describes the configuration of the TOE, and all TOE-related network services and applications; Chapter 5 contains a step by step guide to installation of the TOE in its evalu- ated configuration; Annex A details the password management controls that must be implemented in all user profiles; Annex B lists the software components installed as per Section 5.2; Annex C lists the Linux packages installed in the evaluated configuration and Annex D lists the references that are used in this document. 1.3 Format Assertions for the physical, host, and Oracle configurations are given identifiers to the left of each evaluation configuration requirement in bold Helvetica font, e.g. [A-1]. The names of the identifiers have not changed from one release to the next even when some assertions have been removed because they are no longer applicable. References to sections of documents listed in Annex E are in the format [document, section]. Mandatory evaluation configuration requirements use the words “must” and/or “shall” in each assertion. Strongly recommended evaluation configuration requirements use the words “should” in each assertion. 2 Evaluated Configuration for Oracle Database 10g Release 1 (10.1.0) November 2005 Issue 0.5 CHAPTER 2 Physical Configuration This chapter describes the physical and procedural requirements for maintaining the security of the TOE. 2.1 Physical Environmental Assumptions [A-1] The processing resources of the TOE shall be located within controlled access facili- ties which will prevent unauthorized physical access to the TOE by unprivileged us- ers. Only authorised DBA or operator users (i.e. users who are allowed corresponding SYSDBA or SYSOPER access rights within the database) shall have physical access to the server machines. [A-2] The processing resources of the underlying operating system required to support the TOE shall be located within controlled access facilities which will prevent unauthor- ised physical access. [A-3] The processing resources of the network services required to support the TOE shall be located within controlled access facilities which will prevent unauthorised physical access. [A-4] The media on which authentication data for the underlying operating system data re- sides shall not be physically removable from the underlying operating system by un- authorised users. [A-5] The media on which the TOE audit data resides shall not be physically removable from the underlying operating system by unauthorised users. [A-6] Any on-line and/or off-line storage media on which security relevant data resides shall be located within controlled access facilities which will prevent unauthorised physical access. 2.2 Supporting Procedures Procedures for the administration of TOE security shall be established based on the contents of this document, the Security Target [ST], any site security policy that may be in force, and [ECGR], [SRN] and [ECGS]. In particular procedures shall be estab- Evaluated Configuration for Oracle Database 10g 3 Release 1 (10.1.0) November 2005 Issue 0.5 lished such that: • users must not disclose their operating system passwords to other individuals; • operating system or database passwords generated by the system administrator shall be distributed in a secure manner; • procedures and/or mechanisms shall assure that, after