Documentation - V-270554

Title

Unused database components that are integrated in the database management system (DBMS) and cannot be uninstalled must be disabled.

Description

<VulnDiscussion>Information systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions). It is detrimental for applications to provide, or install by default, any functionality exceeding requirements or mission objectives. Examples include, but are not limited to, installing advertising software, demonstrations, or browser pl...

Fix Text (Documentation Requirement)

In the system documentation list the integrated components required for operation of applications that will be accessing the DBMS. For Oracle Database 12.1 and higher, only the following components can be enabled/disabled: Oracle Data Mining (dm) Oracle Database Extensions for .NET (ode_net) Oracle OLAP (olap) Oracle Partitioning (partitioning) Real Application Testing (rat) Use the chopt utility (an Oracle-supplied operating system command that resides in the <Oracle Home path>/bin directory) to disable each option that should not be available. The command format is chopt <enable|disable> <option> where <option> is any of the abbreviations in parentheses in the list above. For example, to disable Real Application Testing, issue the following command at an OS prompt: chopt disable rat...