9 Hardening an Exalytics Machine

This chapter describes the tasks to perform when hardening an Exalytics Machine.

Each Oracle Exalytics Release 2.2 base image comes preinstalled with the Exalytics Hardening script (STIGfix).

STIGs (Security Technical Implementation Guides) are security configuration standards defined by Defense Information Systems Agency (DISA), an agency of the United States Department of Defense (DoD).

You use the STIGfix script to harden an Exalytics Machine, thereby making it compliant with STIGs standards.

This chapter consists of the following sections:

• Running the Exalytics Hardening Script
  
• Checking STIG Compliance
  
• List of Vulnerabilities Fixed
  
• STIG security hardening for OVM guests