Remote database or other external access must use fully-qualified names.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-61529	O121-BP-026300	SV-76019r1_rule		Medium

Description
The Oracle GLOBAL_NAMES parameter is used to set the requirement for database link names to be the same name as the remote database whose connection they define. By using the same name for both, ambiguity is avoided and unauthorized or unintended connections to remote databases are less likely.

STIG	Date
Oracle Database 12c Security Technical Implementation Guide	2018-02-28

Details

Check Text ( C-62401r1_chk )
From SQL*Plus: select value from v$parameter where name = 'global_names'; If the value returned is FALSE, this is a finding.

Fix Text (F-67445r1_fix)
From SQL*Plus: alter system set global_names = TRUE scope = spfile; Note: This parameter, if changed, will affect all currently defined Oracle database links. The above SQL*Plus command will set the parameter to take effect at next system startup.