← Back to Oracle Database 12c Security Technical Implementation Guide

V-219828

CAT II (Medium)

A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device.

Rule ID

SV-219828r879887_rule

STIG

Oracle Database 12c Security Technical Implementation Guide

Version

V2R9

CCIs

CCI-000366

Discussion

The Oracle redo log files store the detailed information on changes made to the database. This information is critical to database recovery in case of a database failure.

Check Content

From SQL*Plus:

  select count(*) from V$LOG;

If the value of the count returned is less than 2, this is a finding.

From SQL*Plus:

  select count(*) from V$LOG where members > 1;

If the value of the count returned is less than 2 and a RAID storage device is not being used, this is a finding.

Fix Text

To define additional redo log file groups:

From SQL*Plus (Example):

  alter database add logfile group 2 
    ('diska:log2.log' ,
     'diskb:log2.log') size 50K; 

To add additional redo log file [members] to an existing redo log file group:

From SQL*Plus (Example):

  alter database add logfile member 'diskc:log2.log'
  to group 2;

Replace diska, diskb, diskc with valid, different disk drive specifications.

Replace log#.log file with valid or custom names for the log files.