What Oracle Views are required to be created on the target databases for Qualys to run it's scans?
In particular I am interested in the specific DDL for those Views for an AWS Oracle RDS database (12c).
I need to create a Qualys Account, Qualys Role and grant that Role various privileges to allow Qualys to run it's scans (SELECTS on various tables), as well as SELECTS on Views.
The documentation I have looks old (scoured Google for it) and the DDL to create the Views is not working, partly due to permissions on SYS objects I suspect by the errors.
I managed to GRANT the SELECT on some SYS objects by using this method (for RDS databases):
SQL> call rdsadmin.rdsadmin_util.grant_sys_object('DBA_USERS_WITH_DEFPWD','QUALYS_ROLE', 'SELECT');
However, the documentation asks for these Views to be pre-created and I am unsure whether these Views are still relevant for Oracle 12c RDS or not?
By the way, the documentation attached suggested the Views were created from a SELECT on the SYS tables (SYS.X$KSPPCV and SYS.X$KSPPI respectively), but on closer inspection these sub tables did not exist in my 12c RDS databases.
I found these related tables instead (STATS$X_$KSPPSV and STATS$X_$KSPPI) which I plugged into the View DDL below, but still failed on a permission issue.
CREATE OR REPLACE VIEW SYS.QUALYS$KSPPCV (ADDR,INDX,
INST_ID,KSPPSTVL,KSPPSTDF,KSPPSTVF,KSPPSTCMNT) AS
SELECT ADDR,INDX,INST_ID,KSPPSTVL,KSPPSTDF,
KSPPSTVF,KSPPSTCMNT
FROM STATS$X_$KSPPSV;
CREATE OR REPLACE VIEW SYS.QUALYS$KSPPI AS
SELECT ADDR,INDX,INST_ID,KSPPINM,KSPPITY,KSPPDESC,KSPPIFLG
FROM STATS$X_$KSPPI;
Can anyone please advise:
- whether these Views are required for 12c RDS?
- whether there are new views for 12c RDS?
- how to create the Views is so?
Kind Regards
Stuart
Hi Stuart,
Please refer to the attached updated guide that covers Oracle 12c. Additionally, the QG_Oracle11+_Auth_ver1.9.txt file has script to validate the permissions for the scanning account. You can get to this guide directly by navigating to Help -> Resources -> Scan Authentication - Oracle (PC).
Thanks,
Hariom Singh