Documentation - V-270553

Title

Unused database components, database management system (DBMS) software, and database objects must be removed.

Description

<VulnDiscussion>Information systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions). It is detrimental for applications to provide, or install by default, functionality exceeding requirements or mission objectives. Examples include, but are not limited to, installing advertising software, demonstrations, or browser plug-i...

Fix Text (Documentation Requirement)

If any components are required for operation of applications that will be accessing the DBMS, include them in the system documentation. Components cannot be removed via Database Configuration Assistant (DBCA) or manually once the database has been created, either from a container or a noncontainer database. However DBCA can be used to create a noncontainer database and remove components during the creation process before the database is created. When using DBCA to create a custom noncontainer database, select: creation mode = advanced Database Template = Custom Database Options..Database Component Components that can be selected or deselected are Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle Label Security, Oracle Application Express, and Oracle Databa...