Edit D:\app\Administrator\product\11.2.0\dbhome_1\sysman\admin\emdrep\sql\db\latest\esm\db

Edit D:\app\Administrator\product\11.2.0\dbhome_1\sysman\admin\emdrep\sql\db\latest\esm\db_policies.sql

Rem
Rem $Header: emdb/source/oracle/sysman/emdrep/sql/db/latest/esm/db_policies.sql /st_emdbsa_11.2/1 2009/05/05 23:22:37 hpalitan Exp $
Rem
Rem db_policies.sql
Rem
Rem Copyright (c) 2004, 2009, Oracle and/or its affiliates. 
Rem All rights reserved. 
Rem
Rem    NAME
Rem      db_policies.sql - <one-line expansion of the name>
Rem
Rem    DESCRIPTION
Rem      <short description of component this file declares/defines>
Rem
Rem    NOTES
Rem      <other useful comments, qualifications, etc.>
Rem
Rem    MODIFIED   (MM/DD/YY)
Rem    hpalitan    05/04/09 - Bug #7226211
Rem    manosing    01/12/07 - XbranchMerge manosing_lastpols from main
Rem    dsukhwal    01/06/07 - XbranchMerge manosing_ntpol from main
Rem    manosing    01/08/07 - translation changes for 11DB policies
Rem    manosing    12/04/06 - bug 5443094
Rem    manosing    10/09/06 - 10.2.0.4 policies 
Rem    dsukhwal    10/17/06 - OS_AUTHENT_PREFIX impact
Rem    dsukhwal    10/20/06 - OS_AUTHENT_PREFIX case insensitive
Rem    dsukhwal    09/13/06 - cdump, bdump and udump only upto 10g
Rem    manosing    10/09/06 - 
Rem    rmadampa    08/01/06 - bug 5435113: follow internal sec team recomm
Rem    dsukhwal    07/19/06 - bug 5234593:change threshold type 
Rem    dsukhwal    07/12/06 - bug 5245671 
Rem    dkjain      11/14/05 - Fixing bug-4637345 
Rem    dkjain      08/19/05 - Fixed the cluster windows nlsid issue 
Rem    dkjain      08/23/05 - Disable unlim login attempt policy eval for 
Rem                           repos owner and repos targets 
Rem    dsukhwal    07/08/05 - change english names of windows policies 
Rem    dkjain      06/24/05 - Modifying snapshot object and cat_prop_3 for 
Rem                           rac_database policy 
Rem    dkjain      06/16/05 - Hide the rep metrics 
Rem    dsukhwal    06/10/05 - add policies for NT 
Rem    dkjain      04/26/05 - Changed description for the policies works on 
Rem                           PASSWORD_REUSE_MAX 
Rem    dsukhwal    04/13/05 - add rac policies 
Rem    dkjain      04/03/05 - Fixed bug-4221757 
Rem    dsukhwal    03/21/05 - fix_nls
Rem    dkjain      03/14/05 - Fixed bug-4233284 
Rem    dsukhwal    02/21/05 - correct split policies 
Rem    dkjain      02/18/05 - Fixed bug-4128312 
Rem    dkjain      02/09/05 - Fixed dkjain_bug-4146725
Rem    dsukhwal    02/04/05 - adding audit_syslog_level and allowed logon 
Rem                           version policies 
Rem    dkjain      01/31/05 - Split the policies 
Rem    dkjain      01/18/05 - Desc,label text for metric modified. 
Rem                         - Fixed Bug-4128248, 4128261,4128291,4128351
Rem    dsukhwal    01/12/05 - handle permissions in octal
Rem    dkjain      01/05/05 - Adding Fixet URL 
Rem    dkjain      01/03/05 - Key column are changed
Rem    dsukhwal    12/14/04 - Handle sqlnet.ora permissions in rwx format(bug 
Rem                           4057002) 
Rem    dkjain      11/23/04 - Fixed Bug-3808352 
Rem    dsukhwal    11/23/04 - fix nvl issues in remote_listener and 
Rem                           os_authent_prefix 
Rem    dkjain      11/22/04 - Adding one metric per policy 
Rem    rmadampa    11/19/04 - fix bug 4018237 
Rem    dkjain      11/08/04 - change recommendation msgs 
Rem    dkjain      11/08/04 - Removing duplicate sql_condition statement 
Rem    dkjain      11/07/04 - Added p_auto_enable param  
Rem    dkjain      11/01/04 - Change the empty string
Rem    dkjain      10/18/04 - Fix for evaluation error 
Rem    dkjain      10/14/04 - dkjain_esa_mv_db_policies
Rem    dkjain      10/14/04 - dkjain_esa_impl_init
Rem

SET ESCAPE '\' ;
SET ESCAPE ON ;
DECLARE
 -- Metric Variable
 l_metric_column_list                              MGMT_METRIC_COLUMN_ARRAY;
 l_metric_type                         NUMBER ;
 l_snapshot_list                       MGMT_SNAPSHOT_ARRAY;
 l_snapshot_list_rac                   MGMT_SNAPSHOT_ARRAY;
 l_snapshot_list_inst_10gR1               MGMT_SNAPSHOT_ARRAY;
 l_snapshot_list_inst_10gR2               MGMT_SNAPSHOT_ARRAY;
 -- Policy Variable
 l_ctxList                             MGMT_VIOL_CTXT_DEF_ARRAY;
 l_paramDefList                           MGMT_POLICY_PARAM_DEF_ARRAY;
 l_defaultParamValList                     MGMT_POLICY_PARAM_VAL_ARRAY;
 l_defaultSettingsList                     MGMT_POLICY_KEY_VAL_ARRAY;
 l_auto_enable                           NUMBER ;    
 l_10gR1_db_meta_ver                   VARCHAR2(3) ; 
 l_valid_if_list                       MGMT_VALIDIF_ARRAY ;
 l_rac_database                          CONSTANT VARCHAR2(12) := 'rac_database';
 -- New snapshot name for the instance specific oracle_security metrics is oracle_security_inst
 l_oracle_security_inst                CONSTANT VARCHAR2(20) := 'oracle_security_inst';
 pol_eval_func_10gR2  CONSTANT VARCHAR2(50) := 'ESM.EVAL_POLICY10GR2'  ;  
 
BEGIN

l_10gR1_db_meta_ver := '3.0' ;
  l_metric_type := MGMT_GLOBAL.G_METRIC_TYPE_TABLE ;
  l_snapshot_list := MGMT_SNAPSHOT_ARRAY(
        MGMT_SNAPSHOT_OBJ.NEW(
                p_target_type => ESM.DB_TARGET_TYPE,
                p_snapshot_name => ESM.SECURITY_SNAPSHOT_TYPE));

l_snapshot_list_rac := MGMT_SNAPSHOT_ARRAY(
        MGMT_SNAPSHOT_OBJ.NEW(
                p_target_type   => l_rac_database,
                p_snapshot_name => ESM.SECURITY_SNAPSHOT_TYPE));

-- This snapshot list is prepared for all the db instance 
  -- security metrics which are applicable For both 10gR1 + 10gR2.
  -- In 10gR2 release oracle_security snapshot name has split up into two
  -- oracle_security + oracle_security_int(all db instance security metric used this)
  -- oracle_security_inst snapshot name is included in the snapshot list
  -- bcoz 10gR2 agent will upload the instance data with this snapshot name 
  -- Snapshot name used by 10gR1 agent remains same so included to support the 
  -- backward compatibility as 10gR1 agent uploads the data for 
  -- those metric with oracle_security snapshot name.
  l_snapshot_list_inst_10gR1 := MGMT_SNAPSHOT_ARRAY(
        MGMT_SNAPSHOT_OBJ.NEW(
                p_target_type   => ESM.DB_TARGET_TYPE,
                p_snapshot_name => l_oracle_security_inst),
        MGMT_SNAPSHOT_OBJ.NEW(
                p_target_type   => ESM.DB_TARGET_TYPE,
                p_snapshot_name => ESM.SECURITY_SNAPSHOT_TYPE));
 
  -- for 10gR2 db instance specific metrics => this is oracle_security_inst
  l_snapshot_list_inst_10gR2 := MGMT_SNAPSHOT_ARRAY(
        MGMT_SNAPSHOT_OBJ.NEW(
                p_target_type   => ESM.DB_TARGET_TYPE,
                p_snapshot_name => l_oracle_security_inst));

-- At many places dummy column has been used as one of the repository metric column. 
-- The reason being one constraint being imposed by Policy frame that atleast
-- one repo column should be defined as non-key column.

-- Metric collects more than one row per database target
-- All rows are violation row
-- Policy may result more than one violation row
 l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dbuser',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Database User',
                p_column_label_nlsid =>'DBUSER_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'tablespace_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Tablespace Name',
                p_column_label_nlsid =>'TBSPC_NAME_COL'),
           MGMT_METRIC_COLUMN_OBJ.NEW(
            p_column_name => 'dummy',  
            p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING, 
               p_is_key => MGMT_GLOBAL.G_FALSE, 
            p_column_label => 'Dummy',  
            p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'tableSpaceQuotaRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Database Users With Tablespace Quota',
      p_metric_label_nlsid => 'TBSPC_NAME_METRIC_LABEL',
      p_description  => 'Collect users tablespace quota information',
      p_description_nlsid => 'TBSPC_NAME_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, '
                 ||'value as dbuser,value2 as tablespace_name,value2 as dummy  '
             ||'FROM esm_collection_latest  '
                 ||'WHERE property =''table_space_quotas''',
  p_snapshot_name_list => l_snapshot_list,
  p_metric_column_list => l_metric_column_list  
 ) ;

COMMIT ;
MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'tableSpaceQuotaRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
 --     p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Database Users With Tablespace Quota',
      p_metric_label_nlsid => 'TBSPC_NAME_METRIC_LABEL',
      p_description  => 'Collect users tablespace quota information',
      p_description_nlsid => 'TBSPC_NAME_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, '
                 ||'value as dbuser,value2 as tablespace_name,value2 as dummy  '
             ||'FROM esm_collection_latest  '
                 ||'WHERE property =''table_space_quotas''',
  p_snapshot_name_list => l_snapshot_list_rac,
  p_metric_column_list => l_metric_column_list  
 ) ;

COMMIT ;

l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dbuser',
                p_url_link_template =>'database/security/user?oname=^dbuser^\&event=edit\&otype=USER\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
                   p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'tablespace_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Unlimited_Table_Space_Quota',   --Policy name
  p_metric_name =>'tableSpaceQuotaRep',      --Metric name
  p_policy_label_nlsid =>'TABLESPACE_QUOTA_NAME', 
  p_description =>'Ensures database users are allocated a limited tablespace quota',
  p_description_nlsid =>'TABLESPACE_QUOTA_DESC',
  p_impact =>'Granting unlimited tablespace quotas can cause the filling up of '||
             'the allocated disk space. This can lead to an unresponsive database.',
  p_impact_nlsid =>'TABLESPACE_QUOTA_IMPACT',
  p_recommendation =>'For users with an unlimited tablespace quota, reallocate their '||
              'tablespace quotas to a specific limit.',
  p_recommendation_nlsid =>'TABLESPACE_QUOTA_REOMM' ,
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database may be in an insecure state as user %dbuser% has an unlimited '||
              'tablespace quota for the tablespace:%tablespace_name%.',
  p_message_nlsid =>'TABLESPACE_QUOTA_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Unlimited_Table_Space_Quota',   --Policy name
  p_metric_name =>'tableSpaceQuotaRep',      --Metric name
  p_policy_label_nlsid =>'TABLESPACE_QUOTA_NAME', 
  p_description =>'Ensures database users are allocated a limited tablespace quota',
  p_description_nlsid =>'TABLESPACE_QUOTA_DESC',
  p_impact =>'Granting unlimited tablespace quotas can cause the filling up of '||
             'the allocated disk space. This can lead to an unresponsive database.',
  p_impact_nlsid =>'TABLESPACE_QUOTA_IMPACT',
  p_recommendation =>'For users with an unlimited tablespace quota, reallocate their '||
              'tablespace quotas to a specific limit.',
  p_recommendation_nlsid =>'TABLESPACE_QUOTA_REOMM' ,
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database may be in an insecure state as user %dbuser% has an unlimited '||
              'tablespace quota for the tablespace:%tablespace_name%.',
  p_message_nlsid =>'TABLESPACE_QUOTA_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);

-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result only one violation row

-- DB Audit parameter Metrics And Policies

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'auditFileDestRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,  
      p_metric_label => 'Audit Files Directory Permission',
      p_metric_label_nlsid => 'DBAUDIT_FILE_DIR_METRIC_LABEL',
      p_description  => 'Collect permissions of the folder specified by AUDIT_FILE_DEST initialization parameter',
      p_description_nlsid => 'DBAUDIT_FILE_DIR_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, value as permission, '
       ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest '
       ||'WHERE property =''audit_file_dest''',
  p_snapshot_name_list => l_snapshot_list_inst_10gR2,
  p_metric_column_list => l_metric_column_list  
 ) ;

COMMIT ;
-- Policies

l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name')  
  );
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Audit_File_Destination',   --Policy name
  p_metric_name =>'auditFileDestRep',      --Metric name
  p_policy_label_nlsid =>'AUDIT_FILE_DEST_NAME', 
  p_description =>'Ensures that access to the audit files directory is restricted to '||
                'the owner of the Oracle software set and the DBA group.',
  p_description_nlsid =>'AUDIT_FILE_DEST_DESC',
  p_impact => 'The AUDIT_FILE_DEST initialization parameter specifies the directory where '||
              'the Oracle auditing facility creates the audit files. Giving public read '||
              'permission to this directory may reveal important information such as logging '||
              'information of startup, shutdown, and privileged connections.',
  p_impact_nlsid =>'AUDIT_FILE_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the Audit File directory to the owner of the '||
              'Oracle software set and DBA group. Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'AUDIT_FILE_DEST_RECOMM' ,
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The audit file directory has insecure permissions. The audit file directory (%dir_name%) '||
              'permission is %permission%.',
  p_message_nlsid =>'AUDIT_FILE_DEST_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;

-----------------Metric auditFileDestNTRep Start----------------------
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Audit File Directory (Absolute Path)',
                p_column_label_nlsid =>'AUDIT_FILE_DIR_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'auditFileDestNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,  --NT metrics use the same category prop as the UNIX ones
      p_metric_type => l_metric_type ,
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,              
      p_metric_label => 'Audit Files Directory Permission',
      p_metric_label_nlsid => 'DBAUDIT_FILE_DIR_METRIC_LABEL',
      p_description  => 'Collect permissions of the folder specified by AUDIT_FILE_DEST initialization parameter',
      p_description_nlsid => 'DBAUDIT_FILE_DIR_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, value as users, '
       ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest '
       ||'WHERE property =''nt_audit_file_dest''',
  p_snapshot_name_list => l_snapshot_list_inst_10gR2,
  p_metric_column_list => l_metric_column_list  
 ) ;

COMMIT ;
-----------------Metric auditFileDestNTRep Ends----------------------
-----------------Policy Audit_File_DestinationNT Start-------------------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name')  
  );
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Audit_File_DestinationNT',   --Policy name
  p_metric_name =>'auditFileDestNTRep',      --Metric name
  p_policy_label_nlsid =>'AUDIT_FILE_DEST_NAME_NT', 
  p_description =>'Ensures that access to the audit files directory is restricted to '||
                'the owner of the Oracle software set and the DBA group.',
  p_description_nlsid =>'AUDIT_FILE_DEST_DESC',
  p_impact => 'The AUDIT_FILE_DEST initialization parameter specifies the directory where '||
              'the Oracle auditing facility creates the audit files. Giving public read '||
              'permission to this directory may reveal important information such as logging '||
              'information of startup, shutdown, and privileged connections.',
  p_impact_nlsid =>'AUDIT_FILE_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the Audit File directory to the owner of the '||
              'Oracle software set and DBA group. Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'AUDIT_FILE_DEST_RECOMM' ,
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The audit file directory has insecure permissions. The users %users% have critical permissions on the audit file directory (%dir_name%).',
  p_message_nlsid =>'AUDIT_FILE_DEST_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
-----------------Policy Audit_File_DestinationNT Ends-------------------

--------------Metric userDumpDestRep UNIX start-----------------------
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result only one violation row

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'userDumpDestRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'User Dump Directory Permission',
      p_metric_label_nlsid => 'USER_DUMP_DEST_METRIC_LABEL',
      p_description  => 'Collect permissions of the folder specified by USER_DUMP_DEST initialization parameter',
      p_description_nlsid => 'USER_DUMP_DEST_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, value as permission, '
       ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
       ||'WHERE property =''user_dump_dest''',
  p_snapshot_name_list => l_snapshot_list_inst_10gR2,
  p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------------Metric userDumpDestRep UNIX end-----------------------
-------------Policy User_Dump_Destination UNIX Start-------------------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'User_Dump_Destination',   --Policy name
  p_metric_name =>'userDumpDestRep',      --Metric name
  p_policy_label_nlsid =>'USER_DUMP_DEST_NAME', 
  p_description =>'Ensures that access to the trace files directory is restricted '||
                  'to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'USER_DUMP_DEST_DESC',
  p_impact => 'The trace files for server processes are stored in the directory '||
              'specified by the USER_DUMP_DEST initialization parameter. Giving '||
              'public read permission to this directory may reveal important and '||
              'sensitive internal details of the database and applications.',
  p_impact_nlsid =>'USER_DUMP_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the user dump directory to the owner '||
              'of the Oracle software set and DBA group. Do not give read, write, and '||
              'execute permissions to public.',
  p_recommendation_nlsid =>'USER_DUMP_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The user dump directory has insecure permissions. The user dump directory (%dir_name%) '||
              'permission is %permission%.',
  p_message_nlsid =>'USER_DUMP_DEST_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
-------------Policy User_Dump_Destination UNIX End-------------------

--------------Metric userDumpDestNTRep start-----------------------
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result only one violation row

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'userDumpDestNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,--NT metrics use the same category prop as the UNIX ones
      p_metric_type => l_metric_type ,
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,               
      p_metric_label => 'User Dump Directory Permission',
      p_metric_label_nlsid => 'USER_DUMP_DEST_METRIC_LABEL',
      p_description  => 'Collect permissions of the folder specified by USER_DUMP_DEST initialization parameter',
      p_description_nlsid => 'USER_DUMP_DEST_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, value as users, '
       ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
       ||'WHERE property =''nt_user_dump_dest''',
  p_snapshot_name_list => l_snapshot_list_inst_10gR2,
  p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------------Metric userDumpDestNTRep end-----------------------
-------------Policy User_Dump_DestinationNT Start-------------------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'User_Dump_DestinationNT',   --Policy name
  p_metric_name =>'userDumpDestNTRep',      --Metric name
  p_policy_label_nlsid =>'USER_DUMP_DEST_NAME_NT', 
  p_description =>'Ensures that access to the trace files directory is restricted '||
                  'to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'USER_DUMP_DEST_DESC',
  p_impact => 'The trace files for server processes are stored in the directory '||
              'specified by the USER_DUMP_DEST initialization parameter. Giving '||
              'public read permission to this directory may reveal important and '||
              'sensitive internal details of the database and applications.',
  p_impact_nlsid =>'USER_DUMP_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the user dump directory to the owner '||
              'of the Oracle software set and DBA group. Do not give read, write, and '||
              'execute permissions to public.',
  p_recommendation_nlsid =>'USER_DUMP_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The user dump directory has insecure permissions. The users %users% have critical permissions on the user dump directory (%dir_name%).',
  p_message_nlsid =>'USER_DUMP_DEST_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
-------------Policy User_Dump_DestinationNT End-------------------

-------------Metric backgrdDumpDestRep UNIX Start----------------
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result only one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_1_choices => MGMT_CATEGORY_PROP_ARRAY('8iR2','9i','9iR2','10gR1','10gR2','10gR203'),
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Background Dump Directory (Absolute Path)',
                p_column_label_nlsid =>'BKGRND_DUMP_DIR_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'backgrdDumpDestRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Background Dump Directory Permission',
      p_metric_label_nlsid => 'BKGRND_DUMP_DIR_METRIC_LABEL',
      p_description  => 'Collect permissions of the folder specified by '||
                 'BACKGROUND_DUMP_DEST initialization parameter',
      p_description_nlsid => 'BKGRND_DUMP_DIR_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as permission, '
       ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
       ||'WHERE property =''background_dump_dest''',
  p_snapshot_name_list => l_snapshot_list_inst_10gR2,
  p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-------------Metric backgrdDumpDestRep UNIX End----------------
-------------Policy Background_Dump_Destination UNIX Start--------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name')  
  );
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Background_Dump_Destination',   --Policy name
  p_metric_name =>'backgrdDumpDestRep',      --Metric name
  p_policy_label_nlsid =>'BKGRND_DUMP_DEST_NAME', 
  p_description =>'Ensures that access to the trace files directory is restricted '||
                  'to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'BKGRND_DUMP_DEST_DESC',
  p_impact => 'Background processes such as the log writer process and the database '||
              'writer process use trace files to record occurrences and exceptions of '||
              'database operations, as well as errors. The trace files are stored in the '||
              'directory specified by the BACKGROUND_DUMP_DEST initialization parameter. '||
              'Giving public read permission to this directory may reveal important and '||
              'sensitive internal details of the database and applications.',
  p_impact_nlsid =>'BKGRND_DUMP_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the background dump directory to the '||
               'owner of the Oracle software set and DBA group. Do not give read, '||
               'write, and execute permissions to public.',
  p_recommendation_nlsid =>'BKGRND_DUMP_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The background dump directory has insecure permissions. The background dump '||
              'directory (%dir_name%) permission is %permission%.',
  p_message_nlsid =>'BKGRND_DUMP_DEST_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-------------Policy Background_Dump_Destination UNIX End--------

-------------Metric backgrdDumpDestNTRep Start----------------
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result only one violation row

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Background_Dump_DestinationNT',   --Policy name
  p_metric_name =>'backgrdDumpDestNTRep',      --Metric name
  p_policy_label_nlsid =>'BKGRND_DUMP_DEST_NAME_NT', 
  p_description =>'Ensures that access to the trace files directory is restricted '||
                  'to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'BKGRND_DUMP_DEST_DESC',
  p_impact => 'Background processes such as the log writer process and the database '||
              'writer process use trace files to record occurrences and exceptions of '||
              'database operations, as well as errors. The trace files are stored in the '||
              'directory specified by the BACKGROUND_DUMP_DEST initialization parameter. '||
              'Giving public read permission to this directory may reveal important and '||
              'sensitive internal details of the database and applications.',
  p_impact_nlsid =>'BKGRND_DUMP_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the background dump directory to the '||
               'owner of the Oracle software set and DBA group. Do not give read, '||
               'write, and execute permissions to public.',
  p_recommendation_nlsid =>'BKGRND_DUMP_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The background dump directory has insecure permissions. The users %users% have critical '||
              'permissions on the background dump directory (%dir_name%).',
  p_message_nlsid =>'BKGRND_DUMP_DEST_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-------------Policy Background_Dump_DestinationNT End--------

--------Metric coreDumpDestRep UNIX Start----------------------
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result only one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_1_choices => MGMT_CATEGORY_PROP_ARRAY('8iR2','9i','9iR2','10gR1','10gR2','10gR203'),
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Core Dump Directory (Absolute Path)',
                p_column_label_nlsid =>'CORE_DUMP_DIR_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>'coreDumpDestRep',      --Metric name
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Core Dump Directory Permission',
      p_metric_label_nlsid => 'CORE_DUMP_DIR_METRIC_LABEL',
      p_description  => 'Collect permissions of the folder specified by CORE_DUMP_DEST initialization parameter',
      p_description_nlsid => 'CORE_DUMP_DIR_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, property, value as permission, '
       ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
       ||'WHERE property =''core_dump_dest''',
  p_snapshot_name_list => l_snapshot_list_inst_10gR2,
  p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------Metric coreDumpDestRep UNIX End----------------------
-------Policy Core_Dump_Destination UNIX Start----------------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name')  
  );
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Core_Dump_Destination',   --Policy name
  p_metric_name =>'coreDumpDestRep',      --Metric name
  p_policy_label_nlsid =>'CORE_DUMP_DEST_NAME', 
  p_description =>'Ensures that access to the core dump files directory is restricted '||
                  'to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'CORE_DUMP_DEST_DESC',
  p_impact => 'Core dump files are stored in the directory specified by the CORE_DUMP_DEST '||
              'initialization parameter. A public read privilege on this directory could '||
              'expose sensitive information from the core dump files.',
  p_impact_nlsid =>'CORE_DUMP_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the core dump directory to the owner of '||
               'the Oracle software set and DBA group. Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'CORE_DUMP_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The core dump directory has insecure permissions. The core dump directory (%dir_name%) '||
              'permission is %permission%.',
  p_message_nlsid =>'CORE_DUMP_DEST_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-------Policy Core_Dump_Destination UNIX End----------------

--------Metric coreDumpDestNTRep Start----------------------
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Core Dump Directory (Absolute Path)',
                p_column_label_nlsid =>'CORE_DUMP_DIR_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>'coreDumpDestNTRep',      --Metric name
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,  
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,              
      p_metric_label => 'Core Dump Directory Permission',
      p_metric_label_nlsid => 'CORE_DUMP_DIR_METRIC_LABEL',
      p_description  => 'Collect permissions of the folder specified by CORE_DUMP_DEST initialization parameter',
      p_description_nlsid => 'CORE_DUMP_DIR_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, property, value as users, '
       ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
       ||'WHERE property =''nt_core_dump_dest''',
  p_snapshot_name_list => l_snapshot_list_inst_10gR2,
  p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------Metric coreDumpDestNTRep End----------------------
-------Policy Core_Dump_DestinationNT Start----------------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name')  
  );
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Core_Dump_DestinationNT',   --Policy name
  p_metric_name =>'coreDumpDestNTRep',      --Metric name
  p_policy_label_nlsid =>'CORE_DUMP_DEST_NAME_NT', 
  p_description =>'Ensures that access to the core dump files directory is restricted '||
                  'to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'CORE_DUMP_DEST_DESC',
  p_impact => 'Core dump files are stored in the directory specified by the CORE_DUMP_DEST '||
              'initialization parameter. A public read privilege on this directory could '||
              'expose sensitive information from the core dump files.',
  p_impact_nlsid =>'CORE_DUMP_DEST_IMPACT',
  p_recommendation =>'Restrict permissions to the core dump directory to the owner of '||
               'the Oracle software set and DBA group. Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'CORE_DUMP_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'The core dump directory has insecure permissions. The users %users% have critical permissions on '||
              'the core dump directory (%dir_name%).',
  p_message_nlsid =>'CORE_DUMP_DEST_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-------Policy Core_Dump_DestinationNT End----------------

------------Metric dbControlFilesPermRep UNIX Start-----------
-- Control files Permission Metric 
-- Metric collects more than one row per database target
-- All rows are violation row
-- Policy may result more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Control File (Absolute Path)',
                p_column_label_nlsid =>'CTRL_FILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'dbControlFilesPermRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Control Files Permission', 
      p_metric_label_nlsid => 'CTRL_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of the files specified by CONTROL_FILE initialization parameter',
      p_description_nlsid => 'CTRL_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT  target_guid,value as permission, '
                ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                ||'WHERE property=''db_control_files_perm''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'dbControlFilesPermRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
--      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Control Files Permission', 
      p_metric_label_nlsid => 'CTRL_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of the files specified by CONTROL_FILE initialization parameter',
      p_description_nlsid => 'CTRL_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT  target_guid,value as permission, '
                ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                ||'WHERE property=''db_control_files_perm''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
------------Metric dbControlFilesPermRep UNIX End-----------
--------Policy DB_control_files_Permission UNIX Start-------
-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'DB_control_files_Permission',   --Policy name
  p_metric_name =>'dbControlFilesPermRep',      --Metric name
  p_policy_label_nlsid =>'CONTROL_FILES_NAME', 
  p_description =>'Ensures that access to the control files directory is restricted to '||
                  'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'CONTROL_FILES_DESC',
  p_impact => 'Control files are binary configuration files that control access to data files. '||
              'Control files are stored in the directory specified by the CONTROL_FILES '||
              'initialization parameter. A public write privilege on this directory could '||
              'pose a serious security risk.',
  p_impact_nlsid =>'CONTROL_FILES_IMPACT',
  p_recommendation =>'Restrict permissions to the control files directory to the owner '||
               'of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'CONTROL_FILES_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The control file (%file_name%) permission is %permission%.',
  p_message_nlsid =>'CONTROL_FILES_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList
);
COMMIT ;
ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'DB_control_files_Permission',   --Policy name
  p_metric_name =>'dbControlFilesPermRep',      --Metric name
  p_policy_label_nlsid =>'CONTROL_FILES_NAME', 
  p_description =>'Ensures that access to the control files directory is restricted to '||
                  'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'CONTROL_FILES_DESC',
  p_impact => 'Control files are binary configuration files that control access to data files. '||
              'Control files are stored in the directory specified by the CONTROL_FILES '||
              'initialization parameter. A public write privilege on this directory could '||
              'pose a serious security risk.',
  p_impact_nlsid =>'CONTROL_FILES_IMPACT',
  p_recommendation =>'Restrict permissions to the control files directory to the owner '||
               'of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'CONTROL_FILES_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The control file (%file_name%) permission is %permission%.',
  p_message_nlsid =>'CONTROL_FILES_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList
);
COMMIT ;
--------Policy DB_control_files_Permission UNIX End-------

------------Metric dbControlFilesPermNTRep Start-----------
-- Control files Permission Metric 
-- Metric collects more than one row per database target
-- All rows are violation row
-- Policy may result more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Control File (Absolute Path)',
                p_column_label_nlsid =>'CTRL_FILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'dbControlFilesPermNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type , 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Control Files Permission', 
      p_metric_label_nlsid => 'CTRL_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of the files specified by CONTROL_FILE initialization parameter',
      p_description_nlsid => 'CTRL_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT  target_guid,value as users, '
                ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                ||'WHERE property=''nt_db_control_files_perm''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT ;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'dbControlFilesPermNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
--      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,  
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,              
      p_metric_label => 'Control Files Permission', 
      p_metric_label_nlsid => 'CTRL_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of the files specified by CONTROL_FILE initialization parameter',
      p_description_nlsid => 'CTRL_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT  target_guid,value as users, '
                ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                ||'WHERE property=''nt_db_control_files_perm''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
------------Metric dbControlFilesPermNTRep End-----------
--------Policy DB_control_files_PermissionNT Start-------
-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'DB_control_files_PermissionNT',   --Policy name
  p_metric_name =>'dbControlFilesPermNTRep',      --Metric name
  p_policy_label_nlsid =>'CONTROL_FILES_NAME_NT', 
  p_description =>'Ensures that access to the control files directory is restricted to '||
                  'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'CONTROL_FILES_DESC',
  p_impact => 'Control files are binary configuration files that control access to data files. '||
              'Control files are stored in the directory specified by the CONTROL_FILES '||
              'initialization parameter. A public write privilege on this directory could '||
              'pose a serious security risk.',
  p_impact_nlsid =>'CONTROL_FILES_IMPACT',
  p_recommendation =>'Restrict permissions to the control files directory to the owner '||
               'of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'CONTROL_FILES_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% have critical permissions on the control file (%file_name%).',
  p_message_nlsid =>'CONTROL_FILES_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList
);
COMMIT ;
ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'DB_control_files_PermissionNT',   --Policy name
  p_metric_name =>'dbControlFilesPermNTRep',      --Metric name
  p_policy_label_nlsid =>'CONTROL_FILES_NAME_NT', 
  p_description =>'Ensures that access to the control files directory is restricted to '||
                  'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'CONTROL_FILES_DESC',
  p_impact => 'Control files are binary configuration files that control access to data files. '||
              'Control files are stored in the directory specified by the CONTROL_FILES '||
              'initialization parameter. A public write privilege on this directory could '||
              'pose a serious security risk.',
  p_impact_nlsid =>'CONTROL_FILES_IMPACT',
  p_recommendation =>'Restrict permissions to the control files directory to the owner '||
               'of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'CONTROL_FILES_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% have critical permissions on the control file (%file_name%).',
  p_message_nlsid =>'CONTROL_FILES_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList
);
COMMIT ;
--------Policy DB_control_files_PermissionNT End-------

----------------Metric dbDataFilesPermRep UNIX Start------------------
-- Data Files Permissions Metric
-- Metric collects more than one row per database target
-- All rows are violation row
-- Policy may result more than one violation row

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'dbDataFilesPermRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Data Files Permission', 
      p_metric_label_nlsid => 'DATA_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of data files',
      p_description_nlsid => 'DATA_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as file_name, value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''oh_datafiles_perm''', 
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'dbDataFilesPermRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
 --     p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Data Files Permission', 
      p_metric_label_nlsid => 'DATA_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of data files',
      p_description_nlsid => 'DATA_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as file_name, value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''oh_datafiles_perm''', 
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
----------------Metric dbDataFilesPermRep UNIX End------------------
--------Policy Oracle_Home_Data_Files_Permission UNIX Start--------
-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Oracle_Home_Data_Files_Permission',   --Policy name
  p_metric_name =>'dbDataFilesPermRep',      --Metric name
  p_policy_label_nlsid =>'OH_DATAFILES_PERM_NAME', 
  p_description =>'Ensures that access to the datafiles is restricted to '||
                'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_DATAFILES_PERM_DESC',
  p_impact => 'The datafiles contain all the database data. If datafiles are readable '||
              'to public, they can be read by a user who has no database privileges on the data.',
  p_impact_nlsid =>'OH_DATAFILES_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the datafiles to the owner of the Oracle '||
               'software set and DBA group. Do not give read and write permissions to public.', 
  p_recommendation_nlsid =>'OH_DATAFILES_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The datafile (%file_name%) permission is %permission%.',
  p_message_nlsid =>'OH_DATAFILES_PERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Oracle_Home_Data_Files_Permission',   --Policy name
  p_metric_name =>'dbDataFilesPermRep',      --Metric name
  p_policy_label_nlsid =>'OH_DATAFILES_PERM_NAME', 
  p_description =>'Ensures that access to the datafiles is restricted to '||
                'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_DATAFILES_PERM_DESC',
  p_impact => 'The datafiles contain all the database data. If datafiles are readable '||
              'to public, they can be read by a user who has no database privileges on the data.',
  p_impact_nlsid =>'OH_DATAFILES_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the datafiles to the owner of the Oracle '||
               'software set and DBA group. Do not give read and write permissions to public.', 
  p_recommendation_nlsid =>'OH_DATAFILES_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The datafile (%file_name%) permission is %permission%.',
  p_message_nlsid =>'OH_DATAFILES_PERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
--------Policy Oracle_Home_Data_Files_Permission UNIX End--------

----------------Metric dbDataFilesPermNTRep Start------------------
-- Data Files Permissions Metric
-- Metric collects more than one row per database target
-- All rows are violation row
-- Policy may result more than one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB')));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'dbDataFilesPermNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,  
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,              
      p_metric_label => 'Data Files Permission', 
      p_metric_label_nlsid => 'DATA_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of data files',
      p_description_nlsid => 'DATA_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as users, '
                 ||'value2 as file_name, value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''nt_oh_datafiles_perm''', 
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'dbDataFilesPermNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
--      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,   
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,             
      p_metric_label => 'Data Files Permission', 
      p_metric_label_nlsid => 'DATA_FILE_METRIC_LABEL',
      p_description  => 'Collect permissions of data files',
      p_description_nlsid => 'DATA_FILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as users, '
                 ||'value2 as file_name, value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''nt_oh_datafiles_perm''', 
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
----------------Metric dbDataFilesPermNTRep End------------------
--------Policy Oracle_Home_Data_Files_PermissionNT Start--------
-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Oracle_Home_Data_Files_PermissionNT',   --Policy name
  p_metric_name =>'dbDataFilesPermNTRep',      --Metric name
  p_policy_label_nlsid =>'OH_DATAFILES_PERM_NAME_NT', 
  p_description =>'Ensures that access to the datafiles is restricted to '||
                'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_DATAFILES_PERM_DESC',
  p_impact => 'The datafiles contain all the database data. If datafiles are readable '||
              'to public, they can be read by a user who has no database privileges on the data.',
  p_impact_nlsid =>'OH_DATAFILES_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the datafiles to the owner of the Oracle '||
               'software set and DBA group. Do not give read and write permissions to public.', 
  p_recommendation_nlsid =>'OH_DATAFILES_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% have critical permissions on the datafile (%file_name%).',
  p_message_nlsid =>'OH_DATAFILES_PERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Oracle_Home_Data_Files_PermissionNT',   --Policy name
  p_metric_name =>'dbDataFilesPermNTRep',      --Metric name
  p_policy_label_nlsid =>'OH_DATAFILES_PERM_NAME_NT', 
  p_description =>'Ensures that access to the datafiles is restricted to '||
                'the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_DATAFILES_PERM_DESC',
  p_impact => 'The datafiles contain all the database data. If datafiles are readable '||
              'to public, they can be read by a user who has no database privileges on the data.',
  p_impact_nlsid =>'OH_DATAFILES_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the datafiles to the owner of the Oracle '||
               'software set and DBA group. Do not give read and write permissions to public.', 
  p_recommendation_nlsid =>'OH_DATAFILES_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% have critical permissions on the datafile (%file_name%).',
  p_message_nlsid =>'OH_DATAFILES_PERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
--------Policy Oracle_Home_Data_Files_PermissionNT End--------

-------------------Metric spfilePermRep UNIX Start----------------------------
-- parameter Files Permission Metric
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result in exactly one violation row
   l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Server Parameter File (Absolute Path)',
                p_column_label_nlsid =>'SPFILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'spfilePermRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Server Parameter File(SPFILE) Permission', 
      p_metric_label_nlsid => 'SPFILE_METRIC_LABEL',
      p_description  => 'Collect permissions of the server parameter file(SPFILE)',
      p_description_nlsid => 'SPFILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as permission, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest '
                 ||'WHERE property =''oh_spfileora_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-------------------Metric spfilePermRep UNIX Start----------------------------
-------------------Policy spfile_Permission UNIX Start------------------------
-- Policies
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));

l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'spfile_Permission',   --Policy name
  p_metric_name =>'spfilePermRep',      --Metric name
  p_policy_label_nlsid =>'OH_SPFILE_PERM_NAME', 
  p_description =>'Ensures that access to the server paramater file is '||
                'restricted to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_SPFILE_PERM_DESC',
  p_impact =>'A server parameter file (SPFILE) lets you store and manage your '||
             'initialization parameters persistently in a server-side disk file. '||
             'A publicly accessible SPFILE can be scanned for sensitive initialization '||
             'parameters exposing the security policies of the database. The SPFILE can '||
             'also be searched for the weaknesses of the Oracle database configuration setting.',
  p_impact_nlsid =>'OH_SPFILE_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the server parameter file (SPFILE) to the owner '||
             'of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'OH_SPFILE_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The server parameter file (%file_name%) permission is %permission%.',
  p_message_nlsid =>'OH_SPFILE_PERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-------------------Policy spfile_Permission UNIX Start------------------------

-------------------Metric spfilePermNTRep Start----------------------------
-- parameter Files Permission Metric
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result in exactly one violation row
   l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Server Parameter File (Absolute Path)',
                p_column_label_nlsid =>'SPFILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'spfilePermNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type , 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,               
      p_metric_label => 'Server Parameter File(SPFILE) Permission', 
      p_metric_label_nlsid => 'SPFILE_METRIC_LABEL',
      p_description  => 'Collect permissions of the server parameter file(SPFILE)',
      p_description_nlsid => 'SPFILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as users, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest '
                 ||'WHERE property =''nt_oh_spfileora_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-------------------Metric spfilePermNTRep Start----------------------------
-------------------Policy spfile_PermissionNT Start------------------------
-- Policies
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));

l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'spfile_PermissionNT',   --Policy name
  p_metric_name =>'spfilePermNTRep',      --Metric name
  p_policy_label_nlsid =>'OH_SPFILE_PERM_NAME_NT', 
  p_description =>'Ensures that access to the server paramater file is '||
                'restricted to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_SPFILE_PERM_DESC',
  p_impact =>'A server parameter file (SPFILE) lets you store and manage your '||
             'initialization parameters persistently in a server-side disk file. '||
             'A publicly accessible SPFILE can be scanned for sensitive initialization '||
             'parameters exposing the security policies of the database. The SPFILE can '||
             'also be searched for the weaknesses of the Oracle database configuration setting.',
  p_impact_nlsid =>'OH_SPFILE_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the server parameter file (SPFILE) to the owner '||
             'of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'OH_SPFILE_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% have critical permissions on the server parameter file (%file_name%).',
  p_message_nlsid =>'OH_SPFILE_PERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-------------------Policy spfile_PermissionNT Start------------------------

------------------Metric initoraPermRep UNIX Start------------------
-- parameter Files Permission Metric
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result in exactly one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Init.Ora (Absolute Path)',
                p_column_label_nlsid =>'INITORA_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'initoraPermRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Initialization Parameter File(INITORA) Permission', 
      p_metric_label_nlsid => 'INITORA_METRIC_LABEL',
      p_description  => 'Collect permissions of the initialization parameter file(INITORA)',
      p_description_nlsid => 'INITORA_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''oh_initora_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
------------------Metric initoraPermRep UNIX End------------------
---------------Policy initora_File_Permission UNIX Start--------------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name')  
  );
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'initora_File_Permission',   --Policy name
  p_metric_name =>'initoraPermRep',      --Metric name
  p_policy_label_nlsid =>'OH_INITORA_PERM_NAME', 
  p_description =>'Ensures that access to the initialization paramater file '||
                  'is restricted to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_INITORA_PERM_DESC',
  p_impact => 'Oracle traditionally stores initialization parameters in a text '||
              'initialization parameter file. A publicly accessible initialization '||
              'parameter file can be scanned for sensitive initialization parameters '||
              'exposing the security policies of the database. The IFILE can also be '||
              'searched for the weaknesses of the Oracle database configuration setting.',
  p_impact_nlsid =>'OH_INITORA_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the initialization parameter file to the '||
               'owner of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'OH_INITORA_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The text initialization parameter file '||
              '(%file_name%) permission is %permission%.',
  p_message_nlsid =>'OH_INITORA_PERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
---------------Policy initora_File_Permission UNIX End--------------

------------------Metric initoraPermNTRep Start------------------
-- parameter Files Permission Metric
-- Metric collects atmost one row per database target
-- All rows are violation row
-- Policy may result in exactly one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );

l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Init.Ora (Absolute Path)',
                p_column_label_nlsid =>'INITORA_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'initoraPermNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,  
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,              
      p_metric_label => 'Initialization Parameter File(INITORA) Permission', 
      p_metric_label_nlsid => 'INITORA_METRIC_LABEL',
      p_description  => 'Collect permissions of the initialization parameter file(INITORA)',
      p_description_nlsid => 'INITORA_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as users, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''nt_oh_initora_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
------------------Metric initoraPermNTRep End------------------
---------------Policy initora_File_PermissionNT Start--------------
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name')  
  );
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'initora_File_PermissionNT',   --Policy name
  p_metric_name =>'initoraPermNTRep',      --Metric name
  p_policy_label_nlsid =>'OH_INITORA_PERM_NAME_NT', 
  p_description =>'Ensures that access to the initialization paramater file '||
                  'is restricted to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_INITORA_PERM_DESC',
  p_impact => 'Oracle traditionally stores initialization parameters in a text '||
              'initialization parameter file. A publicly accessible initialization '||
              'parameter file can be scanned for sensitive initialization parameters '||
              'exposing the security policies of the database. The IFILE can also be '||
              'searched for the weaknesses of the Oracle database configuration setting.',
  p_impact_nlsid =>'OH_INITORA_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the initialization parameter file to the '||
               'owner of the Oracle software set and DBA group. Do not give read and write permissions to public.',
  p_recommendation_nlsid =>'OH_INITORA_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% hace critical permissions on the '||
              'text initialization parameter file (%file_name%).',
  p_message_nlsid =>'OH_INITORA_PERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
---------------Policy initora_File_PermissionNT End--------------

------------Metric iFileRefFilesPermRep UNIX Start-----------------
-- ifile Referenced Files Permission Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'IFILE (Absolute Path)',
                p_column_label_nlsid =>'IFILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>     'iFileRefFilesPermRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Files Referenced by IFILE Init Parameter Permission', 
      p_metric_label_nlsid => 'IFILE_METRIC_LABEL_',
      p_description  => 'Collect permissions of the initialization parameter files '||
              'referenced by IFILE  initialization parameter',
      p_description_nlsid => 'IFILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>  'SELECT target_guid,value as permission, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''oh_ifile_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
------------Metric iFileRefFilesPermRep UNIX End-----------------
--------------Policy ifile_File_Permission UNIX Start-----------
-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'ifile_File_Permission',   --Policy name
  p_metric_name =>'iFileRefFilesPermRep',      --Metric name
  p_policy_label_nlsid =>'OH_IFILE_PERM_NAME', 
  p_description =>'Ensures that access to the files referenced by the IFILE '||
                'parameter is restricted to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_IFILE_PERM_DESC',
  p_impact => 'The IFILE initialization parameter can be used to embed the contents of '||
              'another initialization parameter file into the current initialization '||
              'parameter file. A publicly accessible initialization parameter file can '||
              'be scanned for sensitive initialization parameters exposing the security '||
              'policies of the database. Initialization parameter file can also be searched '||
              'for the weaknesses of the Oracle database configuration setting.',
  p_impact_nlsid =>'OH_IFILE_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the files referenced by the IFILE initialization '||
               'parameter file to the owner of the Oracle software set and DBA group. '||
               'Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'OH_IFILE_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message => 'Database is in an insecure state. The IFILE parameter referenced file '||
               '(%file_name%) permission is %permission%.',
  p_message_nlsid =>'OH_IFILE_PERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
--------------Policy ifile_File_Permission UNIX Start-----------

------------Metric iFileRefFilesPermNTRep Start-----------------
-- ifile Referenced Files Permission Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'IFILE (Absolute Path)',
                p_column_label_nlsid =>'IFILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>     'iFileRefFilesPermNTRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,    
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,            
      p_metric_label => 'Files Referenced by IFILE Init Parameter Permission', 
      p_metric_label_nlsid => 'IFILE_METRIC_LABEL_',
      p_description  => 'Collect permissions of the initialization parameter files '||
              'referenced by IFILE  initialization parameter',
      p_description_nlsid => 'IFILE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>  'SELECT target_guid,value as users, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''nt_oh_ifile_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
------------Metric iFileRefFilesPermNTRep End-----------------
--------------Policy ifile_File_PermissionNT Start-----------
-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'ifile_File_PermissionNT',   --Policy name
  p_metric_name =>'iFileRefFilesPermNTRep',      --Metric name
  p_policy_label_nlsid =>'OH_IFILE_PERM_NAME_NT', 
  p_description =>'Ensures that access to the files referenced by the IFILE '||
                'parameter is restricted to the owner of the Oracle software set and the DBA group',
  p_description_nlsid =>'OH_IFILE_PERM_DESC',
  p_impact => 'The IFILE initialization parameter can be used to embed the contents of '||
              'another initialization parameter file into the current initialization '||
              'parameter file. A publicly accessible initialization parameter file can '||
              'be scanned for sensitive initialization parameters exposing the security '||
              'policies of the database. Initialization parameter file can also be searched '||
              'for the weaknesses of the Oracle database configuration setting.',
  p_impact_nlsid =>'OH_IFILE_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to the files referenced by the IFILE initialization '||
               'parameter file to the owner of the Oracle software set and DBA group. '||
               'Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'OH_IFILE_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message => 'Database is in an insecure state. The users %users% have critical permissions on the '||
               'IFILE parameter referenced file (%file_name%).',
  p_message_nlsid =>'OH_IFILE_PERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
--------------Policy ifile_File_PermissionNT Start-----------

-- Oracle Home executables Owner Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 ); 
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'owner',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Owner',
                p_column_label_nlsid =>'OWNER_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'File In Bin Folder (Absolute Path)',
                p_column_label_nlsid =>'BIN_FILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'ohBinFilesOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Owner of Files in Bin Folder',
      p_metric_label_nlsid => 'BIN_FILE_OWN_METRIC_LABEL',
      p_description  => 'Collect owner information of all files and directories in oralcehome/bin folder',
      p_description_nlsid => 'BIN_FILE_OWN_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid,value as owner, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''oh_bin_files_owner''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'owner'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Oracle_Home_Executable_Files_Owner',   --Policy name
  p_metric_name =>'ohBinFilesOwnerRep',      --Metric name
  p_policy_label_nlsid =>'OH_BIN_FILE_OWNER_NAME',
  p_description =>'Ensures that the ownership of all files and directories in the '||
                  'ORACLE_HOME/bin folder is the same as the Oracle software installation owner',
  p_description_nlsid =>'OH_BIN_FILE_OWNER_DESC',
  p_impact => 'Incorrect file permissions on some of the Oracle files can cause major security issues.',
  p_impact_nlsid =>'OH_BIN_FILE_OWNER_IMPACT',
  p_recommendation =>'For files and directories in the ORACLE_HOME/bin folder that do not have '||
              'the same owner as the Oracle software installation, change their owner to the installation owner.',
  p_recommendation_nlsid =>'OH_BIN_FILE_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. Owner of (%file_name%) is %owner% who is not '||
              'the owner of the Oracle software installation.',
  p_message_nlsid =>'OH_BIN_FILE_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList
);
COMMIT ;

-----------Metric ohExeBinFilesPermRep UNIX Start--------------------------
-- Oracle Home File Permission Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'File In Bin Folder (Absolute Path)',
                p_column_label_nlsid =>'BIN_FILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>     'ohExeBinFilesPermRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Permission of Files in Bin Folder',
      p_metric_label_nlsid => 'BIN_FILE_PERM_METRIC_LABEL',
      p_description  => 'Collect permissions of all files and directories in oralcehome/bin folder',
      p_description_nlsid => 'BIN_FILE_PERM_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as permission, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''oh_exebin_files_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-----------Metric ohExeBinFilesPermRep UNIX End--------------------------
-------------Policy Oracle_Home_Executable_Files_Permission UNIX Start-------
--Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Oracle_Home_Executable_Files_Permission',   --Policy name
  p_metric_name =>'ohExeBinFilesPermRep',      --Metric name
  p_policy_label_nlsid =>'EXE_FILE_PERM_NAME', 
  p_description =>'Ensures that all files in the ORACLE_HOME/bin folder do not have public write permission',
  p_description_nlsid =>'EXE_FILE_PERM_DESC', 
  p_impact => 'Incorrect file permissions on some of the Oracle files can cause major security issues.',
  p_impact_nlsid =>'EXE_FILE_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to all files in the ORACLE_HOME/bin  to the owner of the Oracle software set and DBA group. Do not give write permission to public.',
  p_recommendation_nlsid =>'EXE_FILE_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. File (%file_name%) permission is %permission%.',
  p_message_nlsid =>'EXE_FILE_PERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list => l_ctxList    
);
COMMIT ;
-------------Policy Oracle_Home_Executable_Files_Permission UNIX End-------

-----------Metric ohExeBinFilesPermNTRep Start--------------------------
-- Oracle Home File Permission Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'File In Bin Folder (Absolute Path)',
                p_column_label_nlsid =>'BIN_FILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>     'ohExeBinFilesPermNTRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type , 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,               
      p_metric_label => 'Permission of Files in Bin Folder',
      p_metric_label_nlsid => 'BIN_FILE_PERM_METRIC_LABEL',
      p_description  => 'Collect permissions of all files and directories in oralcehome/bin folder',
      p_description_nlsid => 'BIN_FILE_PERM_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as users, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''nt_oh_exebin_files_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-----------Metric ohExeBinFilesPermNTRep UNIX End--------------------------
-------------Policy Oracle_Home_Executable_Files_PermissionNT Start-------
--Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Oracle_Home_Executable_Files_PermissionNT',   --Policy name
  p_metric_name =>'ohExeBinFilesPermNTRep',      --Metric name
  p_policy_label_nlsid =>'EXE_FILE_PERM_NAME_NT', 
  p_description =>'Ensures that all files in the ORACLE_HOME/bin folder do not have public write permission',
  p_description_nlsid =>'EXE_FILE_PERM_DESC', 
  p_impact => 'Incorrect file permissions on some of the Oracle files can cause major security issues.',
  p_impact_nlsid =>'EXE_FILE_PERM_IMPACT',
  p_recommendation =>'Restrict permissions to all files in the ORACLE_HOME/bin  to the owner of the Oracle software set and DBA group. Do not give write permission to public.',
  p_recommendation_nlsid =>'EXE_FILE_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. Users %users% have critical permissions on the file (%file_name%).',
  p_message_nlsid =>'EXE_FILE_PERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list => l_ctxList    
);
COMMIT ;
-------------Policy Oracle_Home_Executable_Files_PermissionNT End-------

-------Metric ohFilesPermissionRep UNIX Start---------------------------
-- Oracle Home files Permissions Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'OH File (Absolute Path)',
                p_column_label_nlsid =>'OH_FILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>     'ohFilesPermissionRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,               
      p_metric_label => 'Permission of Files and Folders in OH Folder',
      p_metric_label_nlsid => 'OH_FILE_PERM_METRIC_LABEL',
      p_description  => 'Collect permissions of all files and directories '||
                 'except bin directory in oralcehome folder',
      p_description_nlsid => 'OH_FILE_PERM_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid,value as permission, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''oh_files_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-------Metric ohFilesPermissionRep UNIX End---------------------------
-----------Policy Oracle_Home_File_Permission UNIX Start--------------
--Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Oracle_Home_File_Permission',   --Policy name
  p_metric_name =>'ohFilesPermissionRep',      --Metric name
  p_policy_label_nlsid =>'OH_FILEPERM_NAME', 
  p_description =>'Ensures that all files in the ORACLE_HOME directories (except for ORACLE_HOME/bin) do not have public read, write and  execute permissions',
  p_description_nlsid =>'OH_FILEPERM_DESC',
  p_impact => 'Incorrect file permissions on some of the Oracle files can cause major security issues.',
  p_impact_nlsid =>'OH_FILEPERM_IMPACT',
  p_recommendation =>'Restrict permissions to all files in the ORACLE_HOME directories (except for ORACLE_HOME/bin) to the owner of the Oracle software set and DBA group. Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'OH_FILEPERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type => MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => 'rownum > 0',
  p_message =>'Database is in an insecure state. File (%file_name%) permission is %permission%.',
  p_message_nlsid => 'OH_FILEPERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-----------Policy Oracle_Home_File_Permission UNIX End--------------

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'file_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'OH File (Absolute Path)',
                p_column_label_nlsid =>'OH_FILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name =>     'ohFilesPermissionRepNT',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,               
      p_metric_label => 'Permission of Files and Folders in OH Folder',
      p_metric_label_nlsid => 'OH_FILE_PERM_METRIC_LABEL',
      p_description  => 'Collect permissions of all files and directories '||
                 'except bin directory in oralcehome folder',
      p_description_nlsid => 'OH_FILE_PERM_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid,value as users, '
                 ||'value2 as file_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''nt_oh_files_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-------Metric ohFilesPermissionRepWINDOWS End---------------------------
-----------Policy Oracle_Home_File_Permission WINDOWS Start--------------
--Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'file_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Oracle_Home_File_PermissionNT',   --Policy name
  p_metric_name =>'ohFilesPermissionRepNT',      --Metric name
  p_policy_label_nlsid =>'OH_FILEPERM_NAME_NT', 
  p_description =>'Ensures that all files in the ORACLE_HOME directories (except for ORACLE_HOME/bin) do not have public read, write and  execute permissions',
  p_description_nlsid =>'OH_FILEPERM_DESC',
  p_impact => 'Incorrect file permissions on some of the Oracle files can cause major security issues.',
  p_impact_nlsid =>'OH_FILEPERM_IMPACT',
  p_recommendation =>'Restrict permissions to all files in the ORACLE_HOME directories (except for ORACLE_HOME/bin) to the owner of the Oracle software set and DBA group. Do not give read, write, and execute permissions to public.',
  p_recommendation_nlsid =>'OH_FILEPERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type => MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => 'rownum > 0',
  p_message =>'Database is in an insecure state. Users %users% have  permissions on the Oracle Home file (%file_name%).',
  p_message_nlsid => 'OH_FILEPERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
-----------Policy Oracle_Home_File_Permission WINDOWSEnd--------------

--------Metric logArchiveDestRep UNIX Start-----------------------
-- Log Archive Destionation Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Log Archive Directory (Absolute Path)',
                p_column_label_nlsid =>'LOG_ARCHVE_DEST_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'logArchiveDestRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Log Archive Directories Permission',
      p_metric_label_nlsid => 'LOG_ARCHVE_DEST_METRIC_LABEL',
      p_description  => 'Collect permissions of the folders specified by LOG_ARCHIVE_DEST initialization parameter',
      p_description_nlsid => 'LOG_ARCHVE_DEST_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as permission, '
                 ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''log_archive_dest_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------Metric logArchiveDestRep UNIX End-----------------------
---------Policy Log_Archive_Destination_Permission UNIX Start------------
-- Policies
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Log_Archive_Destination_Permission',   --Policy name
  p_metric_name =>'logArchiveDestRep',      --Metric name
  p_policy_label_nlsid =>'LOG_ARCH_DEST_NAME',    
  p_description =>'Ensures that the server''s archive logs are not accessible to public',
  p_description_nlsid =>'LOG_ARCH_DEST_DESC',
  p_impact => 'LogMiner can be used to extract database information from the archive logs if the directory specified by LOG_ARCHIVE_DEST parameter (in init.ora file) is not owned by the owner of the Oracle software installation or has permissions for others.',
  p_impact_nlsid =>'LOG_ARCH_DEST_IMPACT',
  p_recommendation =>'Permissions of the directory specified by LOG_ARCHIVE_DEST parameter should be restricted to the owner of the Oracle software set and DBA group with no permissions to public.',
  p_recommendation_nlsid =>'LOG_ARCH_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The directory(%dir_name%) specified by the LOG_ARCHIVE_DEST parameter has an inappropriate permission: %permission%',
  p_message_nlsid =>'LOG_ARCH_DEST_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
---------Policy Log_Archive_Destination_Permission UNIX Start------------

--------Metric logArchiveDestNTRep Start-----------------------
-- Log Archive Destionation Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Log Archive Directory (Absolute Path)',
                p_column_label_nlsid =>'LOG_ARCHVE_DEST_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'logArchiveDestNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,  
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,              
      p_metric_label => 'Log Archive Directories Permission',
      p_metric_label_nlsid => 'LOG_ARCHVE_DEST_METRIC_LABEL',
      p_description  => 'Collect permissions of the folders specified by LOG_ARCHIVE_DEST initialization parameter',
      p_description_nlsid => 'LOG_ARCHVE_DEST_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as users, '
                 ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''nt_log_archive_dest_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------Metric logArchiveDestNTRep End-----------------------
---------Policy Log_Archive_Destination_PermissionNT Start------------
-- Policies
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Log_Archive_Destination_PermissionNT',   --Policy name
  p_metric_name =>'logArchiveDestNTRep',      --Metric name
  p_policy_label_nlsid =>'LOG_ARCH_DEST_NAME_NT',    
  p_description =>'Ensures that the server''s archive logs are not accessible to public',
  p_description_nlsid =>'LOG_ARCH_DEST_DESC',
  p_impact => 'LogMiner can be used to extract database information from the archive logs if the directory specified by LOG_ARCHIVE_DEST parameter (in init.ora file) is not owned by the owner of the Oracle software installation or has permissions for others.',
  p_impact_nlsid =>'LOG_ARCH_DEST_IMPACT',
  p_recommendation =>'Permissions of the directory specified by LOG_ARCHIVE_DEST parameter should be restricted to the owner of the Oracle software set and DBA group with no permissions to public.',
  p_recommendation_nlsid =>'LOG_ARCH_DEST_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% have critical permissions on the directory(%dir_name%) specified by the LOG_ARCHIVE_DEST parameter.',
  p_message_nlsid =>'LOG_ARCH_DEST_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
---------Policy Log_Archive_Destination_PermissionNT Start------------

-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'owner',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Owner',
                p_column_label_nlsid =>'OWNER_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Log Archive Directory (Absolute Path)',
                p_column_label_nlsid =>'LOG_ARCHVE_DEST_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'logArchiveDestOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Log Archive Directories Owner',
      p_metric_label_nlsid => 'LOG_ARCHVE_DEST_OWN_METRIC_LABEL',
      p_description  => 'Collect owner of the folders specified by LOG_ARCHIVE_DEST initialization parameter',
      p_description_nlsid => 'LOG_ARCHVE_DEST_OWN_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''log_archive_dest_owner''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-- Policies
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'owner'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Log_Archive_Destination_Owner',   --Policy name
  p_metric_name =>'logArchiveDestOwnerRep',      --Metric name
  p_policy_label_nlsid =>'LOG_ARCH_DEST_OWNER_NAME',    
  p_description =>'Ensures that the server''s archive logs directory is a valid directory owned by Oracle software owner',
  p_description_nlsid =>'LOG_ARCH_DEST_OWNER_DESC',
  p_impact => 'LogMiner can be used to extract database information from the archive logs if the directory specified by LOG_ARCHIVE_DEST parameter (in init.ora file) is not owned by the owner of the Oracle software installation or has permissions for others.',
  p_impact_nlsid =>'LOG_ARCH_DEST_OWNER_IMPACT',
  p_recommendation =>'Directory specified by LOG_ARCHIVE_DEST parameter should be owned by the Oracle software set.',
  p_recommendation_nlsid =>'LOG_ARCH_DEST_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state as the directory(%dir_name%) specified by the LOG_ARCHIVE_DEST parameter is owned by %owner%.',
  p_message_nlsid =>'LOG_ARCH_DEST_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;

--------Metric logArchiveDupDestRep UNIX Start---------------------
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
  
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission (In Octal)',
                p_column_label_nlsid =>'PERM_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Log Archive Duplex Directory (Absolute Path)',
                p_column_label_nlsid =>'LOG_ARCHIVE_DUP_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'logArchiveDupDestRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Log Archive Duplex Directories Permission',
      p_metric_label_nlsid => 'LOG_ARCHIVE_DUP_METRIC_LABEL',
      p_description  => 'Collect permissions of the folders specified by '||
                 'LOG_ARCHIVE_DUPLEX_DEST initialization parameter',
      p_description_nlsid => 'LOG_ARCHIVE_DUP_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as dir_name , value2 as dummy FROM esm_collection_latest '  
                 ||'WHERE property =''log_archive_duplex_dest_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------Metric logArchiveDupDestRep UNIX End---------------------
------POlicy Log_Archive_Duplex_Destination_Permission UNIX Start-----
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Log_Archive_Duplex_Destination_Permission',
  p_metric_name =>'logArchiveDupDestRep',      --Metric name
  p_policy_label_nlsid =>'LOG_ARCHV_DUP_PERM_NAME',    
  p_description =>'Ensures that the server''s archive logs are not accessible to public',
  p_description_nlsid =>'LOG_ARCHV_DUP_PERM_DESC',
  p_impact => 'LogMiner can be used to extract database information from the archive logs if the directory specified by LOG_ARCHIVE_DUPLEX_DEST parameter (in init.ora file) is not owned by the owner of the Oracle software installation or has permissions for others.',
  p_impact_nlsid =>'LOG_ARCHV_DUP_PERM_IMPACT',
  p_recommendation =>'Permissions of the directory specified by LOG_ARCHIVE_DUPLEX_DEST parameter should be restricted to the owner of the Oracle software set and DBA group with no permissions to public.',
  p_recommendation_nlsid =>'LOG_ARCHV_DUP_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The directory(%dir_name%) specified by the LOG_ARCHIVE_DUPLEX_DEST parameter has an inappropriate permission: %permission%',
  p_message_nlsid => 'LOG_ARCHV_DUP_PERM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
------POlicy Log_Archive_Duplex_Destination_Permission UNIX End-----

--------Metric logArchiveDupDestNTRep Start---------------------
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row
  
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'users',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Users',
                p_column_label_nlsid =>'USERS_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Log Archive Duplex Directory (Absolute Path)',
                p_column_label_nlsid =>'LOG_ARCHIVE_DUP_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'logArchiveDupDestNTRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type ,  
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,              
      p_metric_label => 'Log Archive Duplex Directories Permission',
      p_metric_label_nlsid => 'LOG_ARCHIVE_DUP_METRIC_LABEL',
      p_description  => 'Collect permissions of the folders specified by '||
                 'LOG_ARCHIVE_DUPLEX_DEST initialization parameter',
      p_description_nlsid => 'LOG_ARCHIVE_DUP_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as users, '
                 ||'value2 as dir_name , value2 as dummy FROM esm_collection_latest '  
                 ||'WHERE property =''nt_log_archive_duplex_dest_perm''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--------Metric logArchiveDupDestNTRep End---------------------
------POlicy Log_Archive_Duplex_Destination_PermissionNT Start-----
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'users'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Log_Archive_Duplex_Destination_PermissionNT',
  p_metric_name =>'logArchiveDupDestNTRep',      --Metric name
  p_policy_label_nlsid =>'LOG_ARCHV_DUP_PERM_NAME_NT',    
  p_description =>'Ensures that the server''s archive logs are not accessible to public',
  p_description_nlsid =>'LOG_ARCHV_DUP_PERM_DESC',
  p_impact => 'LogMiner can be used to extract database information from the archive logs if the directory specified by LOG_ARCHIVE_DUPLEX_DEST parameter (in init.ora file) is not owned by the owner of the Oracle software installation or has permissions for others.',
  p_impact_nlsid =>'LOG_ARCHV_DUP_PERM_IMPACT',
  p_recommendation =>'Permissions of the directory specified by LOG_ARCHIVE_DUPLEX_DEST parameter should be restricted to the owner of the Oracle software set and DBA group with no permissions to public.',
  p_recommendation_nlsid =>'LOG_ARCHV_DUP_PERM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. The users %users% have critical permissions on the directory(%dir_name%) specified by the LOG_ARCHIVE_DUPLEX_DEST parameter.',
  p_message_nlsid => 'LOG_ARCHV_DUP_PERM_NT_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
------POlicy Log_Archive_Duplex_Destination_PermissionNT End-----

-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'owner',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Owner',
                p_column_label_nlsid =>'OWNER_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dir_name',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Log Archive Duplex Directory (Absolute Path)',
                p_column_label_nlsid =>'LOG_ARCHIVE_DUP_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'logArchiveDupDestOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Log Archive Duplex Directories Owner',
      p_metric_label_nlsid => 'LOG_ARCHIVE_DUP_OWN_METRIC_LABEL',
      p_description  => 'Collect owner of the folders specified by LOG_ARCHIVE_DUPLEX_DEST '||
                  'initialization parameter',
      p_description_nlsid => 'LOG_ARCHIVE_DUP_OWN_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as dir_name,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''log_archive_duplex_dest_owner''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'owner'),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'dir_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Log_Archive_Duplex_Destination_Owner',   --Policy name
  p_metric_name =>'logArchiveDupDestOwnerRep',      --Metric name
  p_policy_label_nlsid =>'LOG_ARCHV_DUP_OWNER_NAME',    
  p_description =>'Ensures that the server''s archive logs directory is a valid directory owned by Oracle software owner',
  p_description_nlsid =>'LOG_ARCHV_DUP_OWNER_DESC',
  p_impact => 'LogMiner can be used to extract database information from the archive logs if the directory specified by LOG_ARCHIVE_DUPLEX_DEST parameter (in init.ora file) is not owned by the owner of the Oracle software installation or has permissions for others.',
  p_impact_nlsid =>'LOG_ARCHV_DUP_OWNER_IMPACT',
  p_recommendation =>'Directory specified by LOG_ARCHIVE_DUPLEX_DEST parameter should be owned by the Oracle software set.',
  p_recommendation_nlsid =>'LOG_ARCHV_DUP_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state as the directory(%dir_name%) specified by the LOG_ARCHIVE_DUPLEX_DEST parameter is owned by %owner%.',
  p_message_nlsid => 'LOG_ARCHV_DUP_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;

-- Metric may collect one row per database target
-- All rows are violation row
-- Policy may result in one violation row
 l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_1_choices => MGMT_CATEGORY_PROP_ARRAY('8iR2','9i','9iR2'),
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'value',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Log Archive Start',
                p_column_label_nlsid =>'LOG_ARCHIVE_START_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'logArchiveStartRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Setting of LOG_ARCHIVE_START Parameter',
      p_metric_label_nlsid => 'LOG_ARCHIVE_START_METRIC_LABEL',
      p_description  => 'Collect the setting of LOG_ARCHIVE_START parameter',
      p_description_nlsid => 'LOG_ARCHIVE_START_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value '
                 ||'FROM esm_collection_latest  '
                 ||'WHERE property =''log_archive_start''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;

-- This Url will direct to Initialization Parameters page
 -- From you can edit setting for Initialization Parameters
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
      MGMT_VIOL_CTXT_DEF.NEW(
              p_metric_column => 'value', 
                -- p_url_link_template =>'database/instance/initParameters?target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
                p_url_link_template =>'database/instance/initParameters?event=findParameter\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&initParamName=log_archive_start\&cancelURL=^CANCEL_URL^',
             p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Log_Archive_Start',   --Policy name
  p_metric_name =>'logArchiveStartRep',      --Metric name
  p_policy_label_nlsid =>'LOG_ARCHIVE_START_NAME',    
  p_description =>'Ensures that archiving of redo logs is done automatically and '||
                  'prevents suspension of instance operations when redo logs fill. '||
                  'Only applicable if database is in archivelog mode',
  p_description_nlsid =>'LOG_ARCHIVE_START_DESC', 
  p_impact => 'Setting the LOG_ARCHIEVE_START initialization parameter to TRUE ensures '||
               'that the archiving of redo logs is done automatically and prevents '||
              'suspension of instance operations when redo logs fill. This feature is '||
              'only applicable if the database is in archivelog mode.',
  p_impact_nlsid =>'LOG_ARCHIVE_START_IMPACT',
  p_recommendation =>'Set LOG_ARCHIEVE_START initialization parameter to TRUE.',
  p_recommendation_nlsid =>'LOG_ARCHIVE_START_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. LOG_ARCHIVE_START initialization parameter is set to %value%.',
  p_message_nlsid =>'LOG_ARCHIVE_START_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList         
);

-- UTL_FILe_DIR Settings Metric
-- Metric may collect more than one row per database target
-- All rows are violation row
-- Policy may result in more than one violation row

-------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------

--Policies
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
          MGMT_VIOL_CTXT_DEF.NEW(
        p_metric_column => 'dir_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Utl_File_Directory',   --Policy name
  p_metric_name =>'utlFileDirSettingRep',      --Metric name
  p_policy_label_nlsid =>'UTL_FILE_NAME', 
  p_description =>'Ensures that the Utility File Directory  (UTL_FILE_DIR) initialization '||
                  'parameter  is not set to one of ''*'', ''.'', core dump trace file locations', 
  p_description_nlsid =>'UTL_FILE_DESC',
  p_impact => 'Specifies the directories which the UTL_FILE package can access. '||
              'Having the parameter set to asterisk (*),  period (.), or to sensitive '||
              'directories, could expose them to all users having execute privilege on the UTL_FILE package.',
  p_impact_nlsid =>'UTL_FILE_IMPACT',
  p_recommendation =>'Change the UTL_FILE_DIR initialization parameter to a value other '||
               'than asterisk (*),  or period (.), or  to core dump trace locations.',
  p_recommendation_nlsid =>'UTL_FILE_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. UTL_FILE_DIR  parameter is set to %dir_name%.' ,  
  p_message_nlsid =>'UTL_FILE_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;

l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
          MGMT_VIOL_CTXT_DEF.NEW(
        p_metric_column => 'dir_name'));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Utl_File_Dir_for_9iPlus_Versions',   --Policy name
  p_metric_name =>'utlSetting9IplusRep',      --Metric name
  p_policy_label_nlsid =>'UTL_FILE_9IPLUS_NAME', 
  p_description =>'Ensure that the UTL_FILE_DIR initialization parameter is not '||
             'used in Oracle9i Release 1 and later',
  p_description_nlsid =>'UTL_FILE_9IPLUS_DESC',
  p_impact => 'Specifies the directories which UTL_FILE package can access. Having the parameter '||
              'set to asterisk (*),  period (.), or to sensitive directories could expose '||
              'them to all users having execute privilege on UTL_FILE package.',
  p_impact_nlsid =>'UTL_FILE_9IPLUS_IMPACT',
  p_recommendation =>'For Oracle 9i Release 1 and later, remove the UTL_FILE_DIR initialization '||
              'parameter. Instead, use the CREATE DIRECTORY feature.',
  p_recommendation_nlsid => 'UTL_FILE_9IPLUS_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. UTL_FILE_DIR  parameter '||
              '(set to %dir_name%) is used in a 9i+ server.',
  p_message_nlsid =>'UTL_FILE_9IPLUS_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- OS Authentication Metrics
-- Metric may collect one row per database target
-- It may be non-violation or violation row
-- Policy may result in one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
   l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'os_authent_prefix_domain',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Os Authentication Prefix Domain',
                p_column_label_nlsid =>'OS_AUTH_PRFX_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'osauthPrefixDomainRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Os Authent Prefix Domain',
      p_metric_label_nlsid => 'OS_AUTH_PRFX_METRIC_LABEL',
      p_description  => 'Collect the information of OS prefix domain authentication',
      p_description_nlsid => 'OS_AUTH_PRFX_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as os_authent_prefix_domain '
                 ||'FROM esm_collection_latest '
                 ||'WHERE property=''osauth_prefix_domain''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--Policy
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
          MGMT_VIOL_CTXT_DEF.NEW(
        p_metric_column => 'os_authent_prefix_domain'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
               p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'OS_Authenticate_Prefix_Domain',   --Policy name
  p_metric_name =>'osauthPrefixDomainRep',      --Metric name
  p_policy_label_nlsid =>'OS_AUTH_PRFX_DOM_NAME',    
  p_description =>'Ensures externally identified users specify the domain while connecting',
  p_description_nlsid =>'OS_AUTH_PRFX_DOM_DESC', 
  p_impact => 'This setting is only applicable to Windows systems. If externally identified '||
               'accounts are required, setting OSAUTH_PREFIX_DOMAIN to TRUE in the registry '||
               'forces the account to specify the domain. This prevents spoofing of user '||
               'access from an alternate domain or local system.',
  p_impact_nlsid =>'OS_AUTH_PRFX_DOM_IMPACT',
  p_recommendation =>'For externally identified users from Windows systems, set the '||
               'OSAUTH_PREFIX_DOMAIN initialization parameter to TRUE.',
  p_recommendation_nlsid =>'OS_AUTH_PRFX_DOM_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'upper(:os_authent_prefix_domain) = ''FALSE''',
  p_message =>'Database is in an insecure state. OSAUTH_PREFIX_DOMAIN is not set to TRUE.',
  p_message_nlsid =>'OS_AUTH_PRFX_DOM_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- DB Password setting Metric
-- Metric may collect more than one row per database target
-- These may be non-violation or violation row
-- Policy may result in more than one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
    MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'profile',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Profile',
                p_column_label_nlsid =>'PROFILE_COL'),    
   MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'limit',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Password Lock Time',
                p_column_label_nlsid =>'PWD_LOCK_TIME_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'pwdLockRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,               
      p_metric_label => 'Password Lock Time',
      p_metric_label_nlsid => 'PWD_LOCK_TIME_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_LOCK_TIME',
      p_description_nlsid => 'PWD_LOCK_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_lock_time''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'pwdLockRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
--      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Lock Time',
      p_metric_label_nlsid => 'PWD_LOCK_TIME_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_LOCK_TIME',
      p_description_nlsid => 'PWD_LOCK_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_lock_time''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--Policies

l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'profile', 
             p_url_link_template =>'database/security/profile?oname=^profile^\&event=edit\&otype=PROFILE\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
             p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP),
          MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'limit'));
  l_paramDefList := MGMT_POLICY_PARAM_DEF_ARRAY(
        MGMT_POLICY_PARAM_DEF(
                param_name => 'MIN_PASSWORD_LOCK_TIME',
                param_name_nlsid => 'MIN_PWD_LOCK_TIME_PNAME',
                param_type => MGMT_POLICY.G_PARAM_TYPE_NUMBER));
  l_defaultParamValList := MGMT_POLICY_PARAM_VAL_ARRAY(
        MGMT_POLICY_PARAM_VAL.NEW(
                p_param_name => 'MIN_PASSWORD_LOCK_TIME',
                p_warn_threshold => '1'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL,
                p_param_values => l_defaultParamValList));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Password_Locking_Time',   --Policy name
  p_metric_name =>'pwdLockRep',      --Metric name
  p_policy_label_nlsid =>'PWD_LOCK_TIME_NAME',    
  p_description =>'Ensures PASSWORD_LOCK_TIME is set to a reasonable number of days for all profiles',
  p_description_nlsid =>'PWD_LOCK_TIME_DESC',
  p_impact => 'Having a low value increases the likelihood of Denial of Service attacks.',
  p_impact_nlsid =>'PWD_LOCK_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_LOCK_TIME parameter to no less than 1 for all the profiles.',
  p_recommendation_nlsid =>'PWD_LOCK_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => 'decode(:limit,''UNLIMITED'', 2147483647,to_number(:limit)) < :MIN_PASSWORD_LOCK_TIME',
  p_message =>'Database is in an insecure state. PASSWORD_LOCK_TIME  is set to %limit% days for the profile %profile%.',
  p_message_nlsid =>'PWD_LOCK_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Password_Locking_Time',   --Policy name
  p_metric_name =>'pwdLockRep',      --Metric name
  p_policy_label_nlsid =>'PWD_LOCK_TIME_NAME',    
  p_description =>'Ensures PASSWORD_LOCK_TIME is set to a reasonable number of days for all profiles',
  p_description_nlsid =>'PWD_LOCK_TIME_DESC',
  p_impact => 'Having a low value increases the likelihood of Denial of Service attacks.',
  p_impact_nlsid =>'PWD_LOCK_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_LOCK_TIME parameter to no less than 1 for all the profiles.',
  p_recommendation_nlsid =>'PWD_LOCK_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => 'decode(:limit,''UNLIMITED'', 2147483647,to_number(:limit)) < :MIN_PASSWORD_LOCK_TIME',
  p_message =>'Database is in an insecure state. PASSWORD_LOCK_TIME  is set to %limit% days for the profile %profile%.',
  p_message_nlsid =>'PWD_LOCK_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Metric may collect more than one row per database target
-- These may be non-violation or violation row
-- Policy may result in more than one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'profile',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Profile',
                p_column_label_nlsid =>'PROFILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'limit',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Password Grace Time',
                p_column_label_nlsid =>'PWD_GRACE_TIME_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'pwdGraceRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Grace Time',
      p_metric_label_nlsid => 'PWD_GRACE_TIME_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_GRACE_TIME',
      p_description_nlsid => 'PWD_GRACE_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property = ''password_grace_time''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'pwdGraceRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  --    p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Grace Time',
      p_metric_label_nlsid => 'PWD_GRACE_TIME_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_GRACE_TIME',
      p_description_nlsid => 'PWD_GRACE_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property = ''password_grace_time''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;

l_defaultParamValList := MGMT_POLICY_PARAM_VAL_ARRAY(
        MGMT_POLICY_PARAM_VAL.NEW(
                p_param_name => 'MAX_PASSWORD_GRACE_TIME',
                p_crit_threshold => '7'));

l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL,
                p_param_values => l_defaultParamValList));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Password_Grace_Time',   --Policy name
  p_metric_name =>'pwdGraceRep',      --Metric name
  p_policy_label_nlsid =>'PWD_GRACE_TIME_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_GRACE_TIME set to a reasonable number of days',
  p_description_nlsid =>'PWD_GRACE_TIME_DESC',
  p_impact =>'A high value for the PASSWORD_GRACE_TIME parameter may cause serious '||
             'database security issues by allowing the user to keep the same password for a long time.',
  p_impact_nlsid =>'PWD_GRACE_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_GRACE_TIME parameter to no more  than 7 days for all profiles.',
  p_recommendation_nlsid =>'PWD_GRACE_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => ':MAX_PASSWORD_GRACE_TIME < decode(:limit,''UNLIMITED'', 2147483647,to_number(:limit))',
  p_message =>'Database is in an insecure state. PASSWORD_GRACE_TIME is set to %limit% days for the profile %profile%.',
  p_message_nlsid =>'PWD_GRACE_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
  ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Password_Grace_Time',   --Policy name
  p_metric_name =>'pwdGraceRep',      --Metric name
  p_policy_label_nlsid =>'PWD_GRACE_TIME_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_GRACE_TIME set to a reasonable number of days',
  p_description_nlsid =>'PWD_GRACE_TIME_DESC',
  p_impact =>'A high value for the PASSWORD_GRACE_TIME parameter may cause serious '||
             'database security issues by allowing the user to keep the same password for a long time.',
  p_impact_nlsid =>'PWD_GRACE_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_GRACE_TIME parameter to no more  than 7 days for all profiles.',
  p_recommendation_nlsid =>'PWD_GRACE_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => ':MAX_PASSWORD_GRACE_TIME < decode(:limit,''UNLIMITED'', 2147483647,to_number(:limit))',
  p_message =>'Database is in an insecure state. PASSWORD_GRACE_TIME is set to %limit% days for the profile %profile%.',
  p_message_nlsid =>'PWD_GRACE_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Metric may collect more than one row per database target
-- These may be non-violation or violation row
-- Policy may result in more than one violation row
 l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'profile',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Profile',
                p_column_label_nlsid =>'PROFILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'limit',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Password Life Time',
                p_column_label_nlsid =>'PWD_LIFE_TIME_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'pwdLifeRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Life Time',
      p_metric_label_nlsid => 'PWD_LIFE_TIME_COL',
      p_description  => 'Collect setting of PASSWORD_LIFE_TIME',
      p_description_nlsid => 'PWD_LIFE_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_life_time''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'pwdLifeRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  --    p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Life Time',
      p_metric_label_nlsid => 'PWD_LIFE_TIME_COL',
      p_description  => 'Collect setting of PASSWORD_LIFE_TIME',
      p_description_nlsid => 'PWD_LIFE_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_life_time''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'profile', 
             p_url_link_template =>'database/security/profile?oname=^profile^\&event=edit\&otype=PROFILE\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP),
          MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'limit'));
  l_paramDefList := MGMT_POLICY_PARAM_DEF_ARRAY(
        MGMT_POLICY_PARAM_DEF(
                param_name => 'MAX_PASSWORD_LIFE_TIME',
                param_name_nlsid => 'MAX_PWD_LIFE_TIME_PNAME',
                param_type => MGMT_POLICY.G_PARAM_TYPE_NUMBER));
  l_defaultParamValList := MGMT_POLICY_PARAM_VAL_ARRAY(
        MGMT_POLICY_PARAM_VAL.NEW(
                p_param_name => 'MAX_PASSWORD_LIFE_TIME',
                p_warn_threshold => '180'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL,
                p_param_values => l_defaultParamValList));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Password_Life_Time',   --Policy name
  p_metric_name =>'pwdLifeRep',      --Metric name
  p_policy_label_nlsid =>'PWD_LIFE_TIME_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_LIFE_TIME set to a reasonable number of days',
  p_description_nlsid =>'PWD_LIFE_TIME_DESC',
  p_impact => 'A long password life time gives hackers a long time to try and cook '||
              'the password. May cause serious database security issues.',
  p_impact_nlsid =>'PWD_LIFE_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_LIFE_TIME parameter to no more than 180 days for all profiles.',
  p_recommendation_nlsid =>'PWD_LIFE_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => 'decode(:limit,''UNLIMITED'',2147483647,to_number(:limit)) > :MAX_PASSWORD_LIFE_TIME',
  p_message =>'Database is in an insecure state. PASSWORD_LIFE_TIME is set to  %limit% days for the profile %profile%.',
  p_message_nlsid =>'PWD_LIFE_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Password_Life_Time',   --Policy name
  p_metric_name =>'pwdLifeRep',      --Metric name
  p_policy_label_nlsid =>'PWD_LIFE_TIME_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_LIFE_TIME set to a reasonable number of days',
  p_description_nlsid =>'PWD_LIFE_TIME_DESC',
  p_impact => 'A long password life time gives hackers a long time to try and cook '||
              'the password. May cause serious database security issues.',
  p_impact_nlsid =>'PWD_LIFE_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_LIFE_TIME parameter to no more than 180 days for all profiles.',
  p_recommendation_nlsid =>'PWD_LIFE_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition => 'decode(:limit,''UNLIMITED'',2147483647,to_number(:limit)) > :MAX_PASSWORD_LIFE_TIME',
  p_message =>'Database is in an insecure state. PASSWORD_LIFE_TIME is set to  %limit% days for the profile %profile%.',
  p_message_nlsid =>'PWD_LIFE_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Metric may collect more than one row per database target
-- These may be non-violation or violation row
-- Policy may result in more than one violation row
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'profile',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Profile',
                p_column_label_nlsid =>'PROFILE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'limit',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Password Reuse Max',
                p_column_label_nlsid =>'PWD_REUSE_MAX_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'reuseMaxRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Reuse Max',
      p_metric_label_nlsid => 'PWD_REUSE_MAX_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_REUSE_MAX',
      p_description_nlsid => 'PWD_REUSE_MAX_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_reuse_max''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'reuseMaxRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
 --     p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Reuse Max',
      p_metric_label_nlsid => 'PWD_REUSE_MAX_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_REUSE_MAX',
      p_description_nlsid => 'PWD_REUSE_MAX_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_reuse_max''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'profile', 
             p_url_link_template =>'database/security/profile?oname=^profile^\&event=edit\&otype=PROFILE\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP),
          MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'limit'));
  l_paramDefList := MGMT_POLICY_PARAM_DEF_ARRAY(
        MGMT_POLICY_PARAM_DEF(
                param_name => 'MIN_PASSWORD_REUSE_MAX',
                param_name_nlsid => 'MIN_PWD_REUSE_MAX_PNAME',
                param_type => MGMT_POLICY.G_PARAM_TYPE_NUMBER));
  l_defaultParamValList := MGMT_POLICY_PARAM_VAL_ARRAY(
        MGMT_POLICY_PARAM_VAL.NEW(
                p_param_name => 'MIN_PASSWORD_REUSE_MAX',
                p_warn_threshold => '2147483647'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL,
                p_param_values => l_defaultParamValList));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Password_Reuse_Max',   --Policy name
  p_metric_name =>'reuseMaxRep',      --Metric name
  p_policy_label_nlsid =>'PWD_REUSE_MAX_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_REUSE_MAX set to a reasonable number of times',
  p_description_nlsid =>'PWD_REUSE_MAX_DESC', 
  p_impact => 'Old passwords are usually the best guesses for the current password. '||
              'A low value for the PASSWORD_REUSE_MAX parameter may cause serious '||
              'database security issues by allowing users to reuse their old passwords more often.',
  p_impact_nlsid =>'PWD_REUSE_MAX_IMPACT',
  p_recommendation =>'Set the PASSWORD_REUSE_MAX parameter to UNLIMITED for all profiles.',
  p_recommendation_nlsid =>'PWD_REUSE_MAX_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'decode(:limit,''UNLIMITED'', 2147483647,to_number(:limit)) < :MIN_PASSWORD_REUSE_MAX',
  p_message =>'Database is in an insecure state. PASSWORD_REUSE_MAX  is set to %limit% times for the profile %profile%.',
  p_message_nlsid =>'PWD_REUSE_MAX_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Password_Reuse_Max',   --Policy name
  p_metric_name =>'reuseMaxRep',      --Metric name
  p_policy_label_nlsid =>'PWD_REUSE_MAX_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_REUSE_MAX set to a reasonable number of times',
  p_description_nlsid =>'PWD_REUSE_MAX_DESC', 
  p_impact => 'Old passwords are usually the best guesses for the current password. '||
              'A low value for the PASSWORD_REUSE_MAX parameter may cause serious '||
              'database security issues by allowing users to reuse their old passwords more often.',
  p_impact_nlsid =>'PWD_REUSE_MAX_IMPACT',
  p_recommendation =>'Set the PASSWORD_REUSE_MAX parameter to UNLIMITED for all profiles.',
  p_recommendation_nlsid =>'PWD_REUSE_MAX_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'decode(:limit,''UNLIMITED'', 2147483647,to_number(:limit)) < :MIN_PASSWORD_REUSE_MAX',
  p_message =>'Database is in an insecure state. PASSWORD_REUSE_MAX  is set to %limit% times for the profile %profile%.',
  p_message_nlsid =>'PWD_REUSE_MAX_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'passwdReuseTimeRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Reuse Time',
      p_metric_label_nlsid => 'PWD_REUSE_TIME_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_REUSE_TIME',
      p_description_nlsid => 'PWD_REUSE_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_reuse_time''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
 COMMIT ;
   MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'passwdReuseTimeRep',
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  --    p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Password Reuse Time',
      p_metric_label_nlsid => 'PWD_REUSE_TIME_METRIC_LABEL',
      p_description  => 'Collect setting of PASSWORD_REUSE_TIME',
      p_description_nlsid => 'PWD_REUSE_TIME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid, value as limit, value2 as profile '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''password_reuse_time''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
 COMMIT ;

l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'profile', 
             p_url_link_template =>'database/security/profile?oname=^profile^\&event=edit\&otype=PROFILE\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP),
          MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'limit'));
  l_paramDefList := MGMT_POLICY_PARAM_DEF_ARRAY(
        MGMT_POLICY_PARAM_DEF(
                param_name => 'MIN_PASSWORD_REUSE_TIME',
                param_name_nlsid => 'MIN_PWD_REUSE_TIME_PNAME',
                param_type => MGMT_POLICY.G_PARAM_TYPE_NUMBER));
  l_defaultParamValList := MGMT_POLICY_PARAM_VAL_ARRAY(
        MGMT_POLICY_PARAM_VAL.NEW(
                p_param_name => 'MIN_PASSWORD_REUSE_TIME',
                p_crit_threshold => '2147483647'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL,
                p_param_values => l_defaultParamValList));
  ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Password_Reuse_Time',   --Policy name
  p_metric_name =>'passwdReuseTimeRep',      --Metric name
  p_policy_label_nlsid =>'PWD_REUSE_TIME_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_REUSE_TIME set to a reasonable number of days',
  p_description_nlsid =>'PWD_REUSE_TIME_DESC', 
  p_impact => 'A low value for the PASSWORD_REUSE_TIME parameter may cause serious '||
              'database security issues by allowing users to reuse their old passwords more often.',
  p_impact_nlsid =>'PWD_REUSE_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_REUSE_TIME parameter to UNLIMITED for all profiles.',
  p_recommendation_nlsid =>'PWD_REUSE_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'decode(:limit,''UNLIMITED'',2147483647,to_number(:limit)) < :MIN_PASSWORD_REUSE_TIME', -- If not unlimited
  p_message =>'Database is in an insecure state. PASSWORD_REUSE_TIME  is set to %limit% for the profile %profile%.',
  p_message_nlsid =>'PWD_REUSE_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
  ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Password_Reuse_Time',   --Policy name
  p_metric_name =>'passwdReuseTimeRep',      --Metric name
  p_policy_label_nlsid =>'PWD_REUSE_TIME_NAME',    
  p_description =>'Ensures that all profiles have PASSWORD_REUSE_TIME set to a reasonable number of days',
  p_description_nlsid =>'PWD_REUSE_TIME_DESC', 
  p_impact => 'A low value for the PASSWORD_REUSE_TIME parameter may cause serious '||
              'database security issues by allowing users to reuse their old passwords more often.',
  p_impact_nlsid =>'PWD_REUSE_TIME_IMPACT',
  p_recommendation =>'Set the PASSWORD_REUSE_TIME parameter to UNLIMITED for all profiles.',
  p_recommendation_nlsid =>'PWD_REUSE_TIME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'decode(:limit,''UNLIMITED'',2147483647,to_number(:limit)) < :MIN_PASSWORD_REUSE_TIME', -- If not unlimited
  p_message =>'Database is in an insecure state. PASSWORD_REUSE_TIME  is set to %limit% for the profile %profile%.',
  p_message_nlsid =>'PWD_REUSE_TIME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- DB parameter Metric

-- Metric may collect one row per database target
-- This may be non-violation or violation row
-- Policy may result in one violation row
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
         MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'value',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Trace Files Public',
                p_column_label_nlsid =>'TRACE_FILES_PUB_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'trcFilePublicRep',     
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Trace Files Public ',
      p_metric_label_nlsid => 'TRACE_FILES_PUB_METRIC_LABEL',
      p_description  => 'Collect the information of _TRACE_FILES_PUBLIC initialization parameter',
      p_description_nlsid => 'TRACE_FILES_PUB_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value '
                 ||'FROM esm_collection_latest '
                 ||'WHERE property =''trace_files_public''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT ;
 -- Policies
 -- This Url will direct to Initialization Parameters page
 -- From there you can edit setting for Initialization Parameters
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
      MGMT_VIOL_CTXT_DEF.NEW(
              p_metric_column => 'value', 
                p_url_link_template =>'database/instance/initParameters?event=findParameter\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&initParamName=_trace_files_public\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP));

l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
             p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'PUBLIC_Trace_Files', --Policy Name
  p_metric_name => 'trcFilePublicRep',     
  p_policy_label_nlsid =>'TRACE_FILES_PUB_NAME',    
  p_description =>'Ensures database trace files are not public readable',
  p_description_nlsid =>'TRACE_FILES_PUBLIC_DESC', 
  p_impact => 'If trace files are readable by the PUBLIC group, a malicious user '||
              'may attempt to read the trace files that could lead to sensitive information being exposed.',
  p_impact_nlsid =>'TRACE_FILES_PUBLIC_IMPACT', 
  p_recommendation =>'Set the initialization parameter _TRACE_FILES_PUBLIC to FALSE.',
  p_recommendation_nlsid =>'TRACE_FILES_PUBLIC_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>':value <> ''FALSE''',
  p_message =>'Database is in an insecure state. _TRACE_FILES_PUBLIC initialization parameter is set to :%value%.',
  p_message_nlsid =>'TRACE_FILES_PUBLIC_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Metric may collect one row per database target
-- This may be non-violation or violation row
-- Policy may result in one violation row

-- Policies
 -- This Url will direct to Initialization Parameters page
 -- From there you can edit setting for Initialization Parameters
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
      MGMT_VIOL_CTXT_DEF.NEW(
              p_metric_column => 'value', 
                p_url_link_template =>'database/instance/initParameters?event=findParameter\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&initParamName=audit_trail\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Audit_Trail',   --Policy name
  p_metric_name =>'auditTrailRep',      --Metric name
  p_policy_label_nlsid =>'AUDIT_TRAIL_NAME',    
  p_description =>'Ensures database auditing is enabled',
  --p_description =>'Ensures basic auditing features are enabled',
  p_description_nlsid =>'AUDIT_TRAIL_DESC', 
  p_impact => 'The AUDIT_TRAIL parameter enables or disables database auditing. '||
              'Auditing enhances security because it enforces accountability,'||
              'provides evidence of misuse, and is frequently required for '||
              'regulatory compliance. Auditing also enables system administrators to'||
              'implement enhanced protections, early detection of suspicious '||
              'activities, and finely-tuned security responses.',
  --p_impact => 'Not enabling basic audit features might increase the likelihood '||
  --            'of a denial of service attack going unnoticed.',
  p_impact_nlsid =>'AUDIT_TRAIL_IMPACT',
  p_recommendation =>'Set AUDIT_TRAIL to either DB, default, or OS. Database-stored '||
              'audit records can be easier to review and manage than OS-stored audit '||
              'records. However, audit records stored in operating system files can '||
              'be protected from DBAs via appropriate file permissions, and will '||
              'remain available even if the database is temporarily inaccessible.',
  --p_recommendation =>'Enable auditing by setting the AUDIT_TRAIL initialization parameter '||
  --             'to a value other than NONE or FALSE. A value of OS is the most secure setting.',
  p_recommendation_nlsid =>'AUDIT_TRAIL_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_INFORMATIONAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  --p_condition =>'(upper(:value) = ''NONE'') OR (upper(:value) = ''FALSE'')',
  --Bug 5435113: AUDIT_TRAIL = 'DB' or 'OS' is recommended
  p_condition =>'(upper(:value) <> ''DB'') AND (upper(:value) <> ''OS'')',
  p_message =>'Database is in an insecure state. AUDIT_TRAIL initialization parameter is set to %value%.',
  p_message_nlsid =>'AUDIT_TRAIL_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Metric may collect one row per database target
-- This may be non-violation or violation row
-- Policy may result in one violation row

-- This Url will direct to Initialization Parameters page
 -- From there you can edit setting for Initialization Parameters
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
      MGMT_VIOL_CTXT_DEF.NEW(
              p_metric_column => 'value', 
                p_url_link_template =>'database/instance/initParameters?event=findParameter\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&initParamName=remote_listener\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP));
 l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
  ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Remote_Listener_Instances',-- Policy Name
  p_metric_name =>'rmtLsnrRep',      --Metric name
  p_policy_label_nlsid =>'RMT_LSNR_NAME',
  p_description =>'Ensures listener instances on a remote machine separate from the database instance are not used',
  p_description_nlsid =>'RMT_LSNR_DESC',
  p_impact => 'The REMOTE_LISTENER initialization parameter can be used to allow '||
              'a listener on a remote machine to access the database. This parameter '||
              'is not applicable in a multi-master replication or RAC environment '||
              'where this setting provides a load balancing mechanism for the listener.',
  p_impact_nlsid =>'RMT_LSNR_IMPACT',
  p_recommendation =>'REMOTE_LISTENER should be set null string. This parameter '||
              'is not applicable in a multi-master replication or RAC environment where '||
              'this setting provides a load balancing mechanism for the listener.',
  p_recommendation_nlsid =>'RMT_LSNR_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>':value <> '' ''',
  p_message =>'Database may be in an insecure state as REMOTE_LISTENER initialization parameter is set to %value%.',
  p_message_nlsid =>'RMT_LSNR_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;

-- Not sure about this one
-- Metric may collect one row per database target
-- This may be non-violation or violation row
-- Policy may result in one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
    l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'value',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Os Authentication Prefix',
                p_column_label_nlsid =>'OS_AUTHENT_PREFIX_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'osAuthRep',     
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Os Authentication Prefix',
      p_metric_label_nlsid => 'OS_AUTHENT_PREFIX_METRIC_LABEL',
      p_description  => 'Collect the information of OS_AUTHENT_PREFIX initialization parameter',
      p_description_nlsid => 'OS_AUTHENT_PREFIX_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value '
                 ||'FROM esm_collection_latest '
                 ||'WHERE property =''os_authent_prefix''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT ;

-- This Url will direct to Initialization Parameters page
 -- From there you can edit setting for Initialization Parameters
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
      MGMT_VIOL_CTXT_DEF.NEW(
              p_metric_column => 'value', 
                p_url_link_template =>'database/instance/initParameters?event=findParameter\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&initParamName=os_authent_prefix\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP));
l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Os_Authent_Prefix',--Policy Name
  p_metric_name =>'osAuthRep',      --Metric name
  p_policy_label_nlsid =>'OS_AUTH_PREFIX_NAME',    
  --p_description =>'Ensures that the OS_AUTHENT_PREFIX is set to a value other than OPS$ or null string ("")',
  p_description =>'Ensures that the OS authentication prefix is set to a value other than OPS$',
  p_description_nlsid =>'OS_AUTH_PREFIX_DESC',
  --p_impact => 'Setting this ensures that the only way an account can be used externally is by specifying IDENTIFIED EXTERNALLY when creating a user.',
  p_impact => 'The OS_AUTHENT_PREFIX parameter specifies a prefix used to authenticate '||
              'users attempting to connect to the server. When a connection request is '||
              'attempted, Oracle compares the prefixed username with usernames in the '||
              'database.  Using a prefix, especially OPS$, tends to result in an '||
              'insecure configuration as an account can be authenticated either as '||
              'an operating system user or with the password used in the IDENTIFIED BY '||
              'clause. Attackers are aware of this and will attack these accounts.',
  p_impact_nlsid =>'OS_AUTH_PREFIX_IMPACT',
  --p_recommendation =>'The identified externally approach should only be used on development and test databases. On a production system, ensure that the user cannot get to the operating system level.',
  p_recommendation =>'Set OS_AUTHENT_PREFIX to a value other than OPS$.',
  p_recommendation_nlsid =>'OS_AUTH_PREFIX_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  --Bug 5435113: OS_AUTHENT_PREFIX anything other than OPS$ is recommended
  --p_condition =>'(:value = '' '') OR (:value = ''OPS$'')' ,
  p_condition =>'upper(:value) = ''OPS$''' ,
  p_message =>'Database is in an insecure state. Operating System authentication prefix is set to %value%.',
  p_message_nlsid =>'OS_AUTH_PREFIX_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Metric may collect one row per database target
-- This may be non-violation or violation row
-- Policy may result in one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
  l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'value',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Sql92 Security',
                p_column_label_nlsid =>'SQL92_SECURITY_COL'));
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'sql92Rep',     
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Sql92 Security',
      p_metric_label_nlsid => 'SQL92_SECURITY_METRIC_LABEL',
      p_description  => 'Collect the information of SQL92_SECURITY initialization parameter',
      p_description_nlsid => 'SQL92_SECURITY_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value '
                 ||'FROM esm_collection_latest '
                 ||'WHERE property =''sql92_security''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT ;

-- Data Base Link Metric
-- Metric may collect one row per database target
-- This may be non-violation or violation row
-- Policy may result in one violation row

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))
 );
    l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'value',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Global Name',
                p_column_label_nlsid =>'GLOBAL_NAME_COL'));
  
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'dbLinkGBLNameRep',     
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Global Name',
      p_metric_label_nlsid => 'GLOBAL_NAME_METRIC_LABEL',
      p_description  => 'Collect the information of GLOBAL_NAME initialization parameter',
      p_description_nlsid => 'GLOBAL_NAME_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''db_link_global_name''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
--Policies
 -- This Url will direct to Initialization Parameters page
 -- From there you can edit setting for Initialization Parameters
 l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
      MGMT_VIOL_CTXT_DEF.NEW(
              p_metric_column => 'value', 
                p_url_link_template =>'database/instance/initParameters?event=findParameter\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&initParamName=global_name\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP));
l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'DB_Link_Global_Name',--Policy Name
  p_metric_name =>'dbLinkGBLNameRep',      --Metric name
  p_policy_label_nlsid =>'GLOBAL_NAME_NAME',    
  p_description =>'Ensures that the name of a database link is the same as that of the remote database',
  p_description_nlsid =>'GLOBAL_NAME_DESC',
  p_impact => 'Database link names that do not match the global names of the databases to which '||
              'they are connecting can cause an administrator to inadvertently give access '||
              'to a production server from a test or development server. Knowledge of '||
              'this can be used by a malicious user to gain access to the target database.',
  p_impact_nlsid =>'GLOBAL_NAME_IMPACT',
  p_recommendation =>'If you use or plan to use distributed processing, Oracle Corporation '||
               'recommends that you set the GLOBAL_NAMES initialization parameter to TRUE to '||
               'ensure the use of consistent naming conventions for databases and links in a networked environment.',
  p_recommendation_nlsid =>'GLOBAL_NAME_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>':value <> ''TRUE''',
  p_message =>'Database is in an insecure state. The GLOBAL_NAMES parameter is set to %:value%.',
  p_message_nlsid => 'GLOBAL_NAME_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Metric may collect more than one row per database target
-- These may be non-violation or violation row
-- Policy may result in more than one violation row
l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
    l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'link',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Database Link',
                p_column_label_nlsid =>'DBLINK_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));
  
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'dbLinkPwdRep',     
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Database Link With Hard Coded Password',
      p_metric_label_nlsid => 'DBLINK_METRIC_LABEL',
      p_description  => 'Collect the information about database link with hard coded password',
      p_description_nlsid => 'DBLINK_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as link,value as dummy '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''db_link_with_password''',
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'dbLinkPwdRep',     
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
 --     p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,               
      p_metric_label => 'Database Link With Hard Coded Password',
      p_metric_label_nlsid => 'DBLINK_METRIC_LABEL',
      p_description  => 'Collect the information about database link with hard coded password',
      p_description_nlsid => 'DBLINK_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid,value as link,value as dummy '
                 ||'FROM esm_collection_latest '
                 ||'WHERE  property =''db_link_with_password''',
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT;
-- This Url will take user to Database link page
-- From there he/she can delete link with hard coded password
   l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'link', 
             p_url_link_template =>'database/databaseObjectsSearch?target=^TARGET_NAME^\&type=^TARGET_TYPE^\&otype=schema\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'DB_Link_With_Password',--Policy Name
  p_metric_name =>'dbLinkPwdRep',      --Metric name
  p_policy_label_nlsid =>'DB_LINK_WITH_PWD_NAME',    
  p_description =>'Ensures database links with clear text passwords are not used',
  p_description_nlsid =>'DB_LINK_WITH_PWD_DESC',
  p_impact => 'The table SYS.LINK$ contains the clear text password used by the database link. '||
              'A malicious user can read clear text password from SYS.LINK$ table that can lead to undesirable consequences.',
  p_impact_nlsid =>'DB_LINK_WITH_PWD_IMPACT',
  p_recommendation =>'Avoid creating fixed user database links.',
  p_recommendation_nlsid =>'DB_LINK_WITH_PWD_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  --p_condition =>':property =''db_link_with_password''' ,
  p_condition =>'rownum > 0' ,
  p_message =>'Database is in an insecure state. Database link %link% has clear text password.',
  p_message_nlsid =>'DB_LINK_WITH_PWD_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'DB_Link_With_Password',--Policy Name
  p_metric_name =>'dbLinkPwdRep',      --Metric name
  p_policy_label_nlsid =>'DB_LINK_WITH_PWD_NAME',    
  p_description =>'Ensures database links with clear text passwords are not used',
  p_description_nlsid =>'DB_LINK_WITH_PWD_DESC',
  p_impact => 'The table SYS.LINK$ contains the clear text password used by the database link. '||
              'A malicious user can read clear text password from SYS.LINK$ table that can lead to undesirable consequences.',
  p_impact_nlsid =>'DB_LINK_WITH_PWD_IMPACT',
  p_recommendation =>'Avoid creating fixed user database links.',
  p_recommendation_nlsid =>'DB_LINK_WITH_PWD_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  --p_condition =>':property =''db_link_with_password''' ,
  p_condition =>'rownum > 0' ,
  p_message =>'Database is in an insecure state. Database link %link% has clear text password.',
  p_message_nlsid =>'DB_LINK_WITH_PWD_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

-- Umask Setting Metric
-- Metric may collect more than one row per database target
-- These may be non-violation or violation row
-- Policy may result in more than one violation row

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'umaskSettingRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Umask Setting on Unix',
      p_metric_label_nlsid => 'UMASK_METRIC_LABEL',
      p_description  => 'Collect the information of umask setting of owner of Oracle home',
      p_description_nlsid => 'UMASK_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,     
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source =>'SELECT target_guid,value as umask,value2 as file_name,value2 as dummy '
                 ||'FROM esm_collection_latest '
                 ||'WHERE property=''umask_setting''',
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT ;

-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
          MGMT_VIOL_CTXT_DEF.NEW(
        p_metric_column => 'umask'),
        MGMT_VIOL_CTXT_DEF.NEW(
        p_metric_column => 'file_name'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Umask_Setting',   --Policy name
  p_metric_name =>'umaskSettingRep',      --Metric name
  p_policy_label_nlsid =>'UMASK_SETTING_NAME',    
  p_description =>'On UNIX systems, ensure that the owner of the Oracle software has an '||
                  'appropriate umask value of 022 set',
  p_description_nlsid =>'UMASK_SETTING_DESC',
  p_impact => 'If umask is not set to an appropriate value (like 022), log or trace files '||
              'might become accessible to public exposing sensitive information.',  
  p_impact_nlsid =>'UMASK_SETTING_IMPACT',
  p_recommendation =>'Set umask to 022 for the owner of Oracle software.',
  p_recommendation_nlsid =>'UMASK_SETTING_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. umask for the Oracle softwre owner is set to %umask%.',
  p_message_nlsid =>'UMASK_SETTING_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------------------------------------------------------------------------------------------

-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'profile', 
             p_url_link_template =>'database/security/profile?oname=^profile^\&event=edit\&otype=PROFILE\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
                p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP),
          MGMT_VIOL_CTXT_DEF.NEW(
             p_metric_column => 'limit'));
  l_paramDefList := MGMT_POLICY_PARAM_DEF_ARRAY(
        MGMT_POLICY_PARAM_DEF(
                param_name => 'MAX_FAILED_LOGIN_ATTEMPTS',
                param_name_nlsid => 'MAX_FAILED_LOGIN_ATTEMPTS_PNAME',
                param_type => MGMT_POLICY.G_PARAM_TYPE_NUMBER));
  l_defaultParamValList := MGMT_POLICY_PARAM_VAL_ARRAY(
        MGMT_POLICY_PARAM_VAL.NEW(
                p_param_name => 'MAX_FAILED_LOGIN_ATTEMPTS',
                p_crit_threshold => '10'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
        MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL,
                p_param_values => l_defaultParamValList));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Unlimited_login_attempts',   --Policy name
  p_metric_name =>'unlimitedFailedLoginAttemptsRep',      --Metric name
  p_policy_label_nlsid =>'PROFILE_UNLMTED_FAILED_NAME',    
  p_description =>'Ensure that the number of allowed failed login attempts is set to a reasonable number of login attempts for all profiles',
  p_description_nlsid =>'UNLMT_FAILED_LGIN_DESC',
  p_impact =>'Permits manual and automated password guessing by a malicious user.',
  p_impact_nlsid =>'UNLMT_FAILED_LGIN_IMPACT',
  p_recommendation =>'Set FAILED_LOGIN_ATTEMPTS in user profiles to no more than 10.',
  p_recommendation_nlsid =>'UNLMT_FAILED_LGIN_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'decode(:limit ,''UNLIMITED'',2147483647,to_number(:limit)) > :MAX_FAILED_LOGIN_ATTEMPTS',
  p_message =>'Database is in an insecure state. FAILED_LOGIN_ATTEMPTS is set to  %limit% for the profile %profile%.',
  p_message_nlsid =>'UNLMT_FAILED_LGIN2_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,  
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT; 
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Unlimited_login_attempts',   --Policy name
  p_metric_name =>'unlimitedFailedLoginAttemptsRep',      --Metric name
  p_policy_label_nlsid =>'PROFILE_UNLMTED_FAILED_NAME',    
  p_description =>'Ensure that the number of allowed failed login attempts is set to a reasonable number of login attempts for all profiles',
  p_description_nlsid =>'UNLMT_FAILED_LGIN_DESC',
  p_impact =>'Permits manual and automated password guessing by a malicious user.',
  p_impact_nlsid =>'UNLMT_FAILED_LGIN_IMPACT',
  p_recommendation =>'Set FAILED_LOGIN_ATTEMPTS in user profiles to no more than 10.',
  p_recommendation_nlsid =>'UNLMT_FAILED_LGIN_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_CRITICAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'decode(:limit ,''UNLIMITED'',2147483647,to_number(:limit)) > :MAX_FAILED_LOGIN_ATTEMPTS',
  p_message =>'Database is in an insecure state. FAILED_LOGIN_ATTEMPTS is set to  %limit% for the profile %profile%.',
  p_message_nlsid =>'UNLMT_FAILED_LGIN2_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_TRUE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,  
  p_policy_param_list =>l_paramDefList,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT; 
-- This comment is for all the tableAccess policies
-- Metric may collect more than one row per database target
-- These all are violation row
-- Policy may result in more than one violation row
   l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB'))
 );
   l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'grantee',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Grantee',
                p_column_label_nlsid =>'GRANTEE_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'privilege',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Object Privilege on AUD$ Table',
                p_column_label_nlsid =>'AUD_COL'),
        MGMT_METRIC_COLUMN_OBJ.NEW(
        p_column_name => 'dummy',  
        p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING, 
        p_is_key => MGMT_GLOBAL.G_FALSE, 
        p_column_label => 'Dummy',  
        p_column_label_nlsid =>'DUMMY_COL'));     
  -- METRIC CREATION 
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'audTabRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Database Users with Access on AUD$',
      p_metric_label_nlsid => 'AUD_METRIC_LABEL',
      p_description  => 'Collect the database users having access on AUD$',
      p_description_nlsid => 'AUD_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, '
                 ||'value as grantee, value2 as privilege,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''access_aud_table''',
     p_snapshot_name_list => l_snapshot_list,
     p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
  MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'audTabRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
 --     p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'Database Users with Access on AUD$',
      p_metric_label_nlsid => 'AUD_METRIC_LABEL',
      p_description  => 'Collect the database users having access on AUD$',
      p_description_nlsid => 'AUD_METRIC_DESC', 
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT  target_guid, '
                 ||'value as grantee, value2 as privilege,value2 as dummy FROM esm_collection_latest  '
                 ||'WHERE property =''access_aud_table''',
     p_snapshot_name_list => l_snapshot_list_rac,
     p_metric_column_list => l_metric_column_list  
 ) ;
COMMIT ;
-- POLICY CREATION

l_auto_enable := MGMT_GLOBAL.G_FALSE ;    -- auto_enable is disabled for the following policies
  
  -- This Url will take user to USER EDIT SETTING PAGE
  -- From there he/she can modify object privileges assigned to user.
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'grantee',
                p_url_link_template =>'database/security/user?oname=^grantee^\&event=edit\&otype=USER\&target=^TARGET_NAME^\&type=^TARGET_TYPE^\&cancelURL=^CANCEL_URL^', 
                   p_url_link_type => MGMT_POLICY.G_URL_TYPE_JSP),
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'privilege'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Access_To_AUD_Table',   --Policy name
  p_metric_name =>'audTabRep',      --Metric name
  p_policy_label_nlsid =>'USR_ACCSS_AUD_NAME', 
  p_description =>'Ensures restricted access to SYS.AUD$ table',
  p_description_nlsid =>'USR_ACCSS_AUD_DESC',
  p_impact => 'A knowlegeable and malicious user can gain access to sensitive audit information.',
  p_impact_nlsid =>'USR_ACCSS_AUD_IMPACT',
  p_recommendation =>'Revoke access to SYS.AUD$ table from the non-DBA/SYS database users.' ,
  p_recommendation_nlsid =>'USR_ACCSS_AUD_RECOMM' ,
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_INFORMATIONAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. User %grantee% has %privilege%  privilege on the SYS.AUD$ table.',
  p_message_nlsid =>'USR_ACCSS_AUD_MESG',
  p_auto_enable => l_auto_enable,    -- auto_enable is disabled for the following policies
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;
 ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Access_To_AUD_Table',   --Policy name
  p_metric_name =>'audTabRep',      --Metric name
  p_policy_label_nlsid =>'USR_ACCSS_AUD_NAME', 
  p_description =>'Ensures restricted access to SYS.AUD$ table',
  p_description_nlsid =>'USR_ACCSS_AUD_DESC',
  p_impact => 'A knowlegeable and malicious user can gain access to sensitive audit information.',
  p_impact_nlsid =>'USR_ACCSS_AUD_IMPACT',
  p_recommendation =>'Revoke access to SYS.AUD$ table from the non-DBA/SYS database users.' ,
  p_recommendation_nlsid =>'USR_ACCSS_AUD_RECOMM' ,
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_INFORMATIONAL,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. User %grantee% has %privilege%  privilege on the SYS.AUD$ table.',
  p_message_nlsid =>'USR_ACCSS_AUD_MESG',
  p_auto_enable => l_auto_enable,    -- auto_enable is disabled for the following policies
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList        
);
COMMIT ;

--tkrpof
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'tkprofRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'tkprof  Permission', 
      p_metric_label_nlsid => 'TKPROF_METRIC_LABEL',
      p_description  => 'Collect permissions of  tkprof file',
      p_description_nlsid => 'TKPROF_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''tkprof_perm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'permission'),
 MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'filename'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'tkprof',   --Policy name
  p_metric_name =>'tkprofRep',      --Metric name
  p_policy_label_nlsid =>'TKPROF_NAME', 
  p_description =>'Ensures tkprof executable file permissions are restricted to read and execute for the group, and inaccessible to public',
  p_description_nlsid =>'TKPROF_DESC',
  p_impact => 'Excessive permission for tkprof leaves information within, unprotected.',
  p_impact_nlsid =>'TKPROF_IMPACT',
  p_recommendation =>'Remove tkprof executable if not required. Otherwise, file permissions for tkprof executable should be restricted to read and execute for the group, and inaccessible to public.',
  p_recommendation_nlsid =>'TKPROF_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System  is in an insecure state. The tkprof executable has %permission% permission.',
  p_message_nlsid =>'TKPROF_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

--tkprof_owner
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'owner',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Owner ',
                p_column_label_nlsid =>'FILE_OWNER_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'tkprofOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'tkprof  Owner', 
      p_metric_label_nlsid => 'TKPROF_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  tkprof file',
      p_description_nlsid => 'TKPROF_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''tkprof_owner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'tkprof_owner',   --Policy name
  p_metric_name =>'tkprofOwnerRep',      --Metric name
  p_policy_label_nlsid =>'TKPROF_OWNER_NAME', 
  p_description =>'Ensures tkprof executable file is owned by Oracle software owner',
  p_description_nlsid =>'TKPROF_OWNER_DESC',
  p_impact => 'Not restricting ownership of tkprof to the Oracle software set and DBA group may cause information leak.',
  p_impact_nlsid =>'TKPROF_OWNER_IMPACT',
  p_recommendation =>'Restrict permissions of the tkprof executable to the owner of the Oracle software set and the DBA group.',
  p_recommendation_nlsid =>'TKPROF_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System  is in an insecure state. The tkprof executable owner is %owner%.',
  p_message_nlsid =>'TKPROF_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

--otrace

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'otraceRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'otrace *.dat files', 
      p_metric_label_nlsid => 'OTRACE_METRIC_LABEL',
      p_description  => 'Collect existence *.dat files in otrace dir',
      p_description_nlsid => 'OTRACE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as existence, value as dummy '
                 ||' FROM esm_collection_latest  '
                 ||'WHERE property=''otrace''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT ;

-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'existence'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'otrace',   --Policy name
  p_metric_name =>'otraceRep',      --Metric name
  p_policy_label_nlsid =>'OTRACE_NAME', 
  p_description =>'Avoids negative impact on database performance and disk space usage, caused by data collected by otrace',
  p_description_nlsid =>'OTRACE_DESC',
  p_impact => 'Performance and resource utilization data collection can have a negative impact on database performance and disk space usage.',
  p_impact_nlsid =>'OTRACE_IMPACT',
  p_recommendation =>'Otrace should be disabled',
  p_recommendation_nlsid =>'OTRACE_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System  is in an insecure state. There exist log file[s] created by otrace, they can be source for unwanted information leak .',
  p_message_nlsid =>'OTRACE_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

--------------->>sqlplus perm<<-------------------------

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' '))); --must be conformed by devesh
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'Dummy',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'sqlplusRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'sqlplus  Permission', 
      p_metric_label_nlsid => 'SQLPLUS_METRIC_LABEL',
      p_description  => 'Collect permissions  sqlplus executable file',
      p_description_nlsid => 'SQLPLUS_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy  FROM esm_collection_latest  '
                 ||'WHERE property=''sqlplus_perm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT ;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'sqlplus',   --Policy name
  p_metric_name =>'sqlplusRep',      --Metric name
  p_policy_label_nlsid =>'SQLPLUS_NAME', 
  p_description =>'Ensures that SQL*Plus executable file permissions are limited to the Oracle software set and DBA group',
  p_description_nlsid =>'SQLPLUS_DESC',
  p_impact => 'SQL*Plus allows a user to execute any SQL on the database provided the user has an account with appropriate privileges. Public execute permissions on SQL*Plus can cause security issues by exposing sensitive data to malicious users.',
  p_impact_nlsid =>'SQLPLUS_IMPACT',
  p_recommendation =>'Restrict file permissions for SQL*Plus executable to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'SQLPLUS_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. SQL*Plus permission is %permission%',
  p_message_nlsid =>'SQLPLUS_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<sqlplus perm>>-------------------------

--------------->>sqlplus owner<<-------------------------

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'sqlplusOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'sqlplus  Owner', 
      p_metric_label_nlsid => 'SQLPLUS_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  sqlplus file',
      p_description_nlsid => 'SQLPLUS_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''sqlplus_owner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'sqlplus_owner',   --Policy name
  p_metric_name =>'sqlplusOwnerRep',      --Metric name
  p_policy_label_nlsid =>'SQLPLUS_OWNER_NAME', 
  p_description =>'Ensures SQL*Plus ownership is restricted to the Oracle software set and DBA group',
  p_description_nlsid =>'SQLPLUS_OWNER_DESC',
  p_impact => 'SQL*Plus allows a user to execute any SQL on the database provided the user has an account with appropriate privileges. Not restricting ownership of SQL*Plus to the Oracle software set and DBA group may cause security issues by exposing sensitive data to malicious users.',
  p_impact_nlsid =>'SQLPLUS_OWNER_IMPACT',
  p_recommendation =>'Restrict SQL*Plus ownership to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'SQLPLUS_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The SQL*Plus owner is %owner%.',
  p_message_nlsid =>'SQLPLUS_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<sqlplus owner>>-------------------------

--------------->>WEBCACHE<<-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'webcacheRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'webcache  Permission', 
      p_metric_label_nlsid => 'WEBCACHE_METRIC_LABEL',
      p_description  => 'Collect permissions of  webcache.xml file',
      p_description_nlsid => 'WEBCACHE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''webcache_perm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Webcache',   --Policy name
  p_metric_name =>'webcacheRep',      --Metric name
  p_policy_label_nlsid =>'WEBCACHE_NAME', 
  p_description =>'Ensures the Webcache initialization file (webcache.xml) permissions are limited to the Oracle software set and DBA group',
  p_description_nlsid =>'WEBCACHE_DESC',
  p_impact => 'Webcache stores sensitive information in the initialization file (webcache.xml). A publicly accessible Webcache initialization file can be used to extract sensitive data like the administrator password hash.',
  p_impact_nlsid =>'WEBCACHE_IMPACT',
  p_recommendation =>'Restrict Webcache initialization file (webcache.xml) access to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'WEBCACHE_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Webcache initialization file (webcache.xml) has %permission% permission.',
  p_message_nlsid =>'WEBCACHE_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<WEBCACHE>>-------------------------

---------------<<SNMP_RO>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'snmp_roRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'snmp_ro Permission', 
      p_metric_label_nlsid => 'SNMP_RO_METRIC_LABEL',
      p_description  => 'Collect permissions of  snmp_ro.ora file',
      p_description_nlsid => 'SNMP_RO_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''snmp_ro_perm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Snmp_ro',   --Policy name
  p_metric_name =>'snmp_roRep',      --Metric name
  p_policy_label_nlsid =>'SNMP_RO_NAME', 
  p_description =>'Ensures Oracle Agent SNMP read-only configuration file (snmp_ro.ora) permissions are limited to the Oracle software set and DBA group',
  p_description_nlsid =>'SNMP_RO_DESC',
  p_impact => 'The Oracle Agent SNMP read-only configuration file (snmp_ro.ora) contains the listening address of the agent, the names of SQL*Net listener and Oracle database services it knows about, plus tracing parameters. A publicly accessible SNMP read-only configuration file can be used to extract sensitive data like the tracing directory location, dbsnmp address, etc.',
  p_impact_nlsid =>'SNMP_RO_IMPACT',
  p_recommendation =>'Restrict Oracle Agent SNMP read-only configuration file (snmp_ro.ora) access to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'SNMP_RO_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle Agent SNMP read-only configuration file (snmp_ro.ora) has %permission% permission.',
  p_message_nlsid =>'SNMP_RO_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<SNMP_RO>>-------------------------

---------------<<SNMP_RW>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'snmp_rwRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'snmp_rw  Permission', 
      p_metric_label_nlsid => 'SNMP_RW_METRIC_LABEL',
      p_description  => 'Collect permissions of snmp_rw.ora file',
      p_description_nlsid => 'SNMP_RW_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''snmp_rw_perm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Snmp_rw',   --Policy name
  p_metric_name =>'snmp_rwRep',      --Metric name
  p_policy_label_nlsid =>'SNMP_RW_NAME', 
  p_description =>'Ensures Oracle Agent SNMP read-write configuration file (snmp_rw.ora) permissions are limited to the Oracle software set and DBA group',
  p_description_nlsid =>'SNMP_RW_DESC',
  p_impact => 'The Oracle Agent SNMP read-write configuration file (snmp_ro.ora) contains the listening address of the agent, the names of SQL*Net listener and Oracle database services it knows about, plus tracing parameters. A publicly accessible SNMP read-write configuration file can be used to extract sensitive data like the tracing directory location, dbsnmp address, etc.',
  p_impact_nlsid =>'SNMP_RW_IMPACT',
  p_recommendation =>'Restrict Oracle Agent SNMP read-write configuration file (snmp_rw.ora) access to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'SNMP_RW_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle Agent SNMP read-write configuration file (snmp_rw.ora) has %permission% permission.',
  p_message_nlsid =>'SNMP_RW_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<SNMP_RW>>-------------------------

---------------<<WDBSVR>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'wdbsvrRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'wdbsvr.app  Permission', 
      p_metric_label_nlsid => 'WDBSVR_METRIC_LABEL',
      p_description  => 'Collect permissions of  wdbsvr.app file',
      p_description_nlsid => 'WDBSVR_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''wdbsvr_perm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Wdbsvr',   --Policy name
  p_metric_name =>'wdbsvrRep',      --Metric name
  p_policy_label_nlsid =>'WDBSVR_NAME', 
  p_description =>'Ensures Oracle HTTP Server mod_plsql Configuration file (wdbsvr.app) permissions are limited to the Oracle software set and DBA group',
  p_description_nlsid =>'WDBSVR_DESC',
  p_impact => 'The Oracle Agent SNMP read-write configuration file (snmp_rw.ora) contains the listening address of the agent, the names of SQL*Net listener and Oracle database services it knows about, plus tracing parameters. A publicly accessible SNMP read-write configuration file can be used to extract sensitive data like the tracing directory location, dbsnmp address, etc.',
  p_impact_nlsid =>'WDBSVR_IMPACT',
  p_recommendation =>'Restrict Oracle HTTP Server mod_plsql configuration file (wdbsvr.app) access to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'WDBSVR_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle HTTP Server mod_plsql configuration file (wdbsvr.app) has %permission% permission.',
  p_message_nlsid =>'WDBSVR_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<WDBSVR>>-------------------------

--------------->>XSQL<<-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'xsqlRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'XSQLConfig.xml  Permission', 
      p_metric_label_nlsid => 'XSQL_METRIC_LABEL',
      p_description  => 'Collect permissions of  XSQLConfig.xml file',
      p_description_nlsid => 'XSQL_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''xsql_perm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Xsql',   --Policy name
  p_metric_name =>'xsqlRep',      --Metric name
  p_policy_label_nlsid =>'XSQL_NAME', 
  p_description =>'Ensures Oracle XSQL configuration file (XSQLConfig.xml) permissions are limited to the Oracle software set and DBA group',
  p_description_nlsid =>'XSQL_DESC',
  p_impact => 'The Oracle XSQL configuration file (XSQLConfig.xml) contains sensitive database connection information. A publicly accessible XSQL configuration file can expose the database username and password that can be used access sensitive data or to launch further attacks.',
  p_impact_nlsid =>'XSQL_IMPACT',
  p_recommendation =>'Restrict Oracle XSQL configuration file (XSQLConfig.xml) access to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'XSQL_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle XSQL configuration file (XSQLConfig.xml) has %permission% permission.',
  p_message_nlsid =>'XSQL_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;
---------------<<XSQL>>-------------------------

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));

l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'owner',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Owner ',
                p_column_label_nlsid =>'FILE_OWNER_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
        MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'webcacheOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'webcache Owner', 
      p_metric_label_nlsid => 'WEBCACHE_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  webcache file',
      p_description_nlsid => 'WEBCACHE_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''webcache_owner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Webcache_Owner',   --Policy name
  p_metric_name =>'webcacheOwnerRep',      --Metric name
  p_policy_label_nlsid =>'WEBCACHE_OWNER_NAME', 
  p_description =>'Ensures Webcache initialization file (webcache.xml) is owned by Oracle software owner',
  p_description_nlsid =>'WEBCACHE_OWNER_DESC',
  p_impact => 'Webcache stores sensitive information in the initialization file (webcache.xml). A publicly accessible Webcache initialization file can be used to extract sensitive data like the administrator password hash.',
  p_impact_nlsid =>'WEBCACHE_OWNER_IMPACT',
  p_recommendation =>'Restrict permission of Webcache initialization file (webcache.xml) to the owner of Oracle software set and DBA group.',
  p_recommendation_nlsid =>'WEBCACHE_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System  is in an insecure state. The Webcache initialization file (webcache.xml) owner is %owner%.',
  p_message_nlsid =>'WEBCACHE_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'snmp_roOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'snmp_ro.ora Owner', 
      p_metric_label_nlsid => 'SNMP_RO_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  snmp_ro.ora file',
      p_description_nlsid => 'SNMP_RO_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''snmp_ro_owner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Snmp_ro_Owner',   --Policy name
  p_metric_name =>'snmp_roOwnerRep',      --Metric name
  p_policy_label_nlsid =>'SNMP_RO_OWNER_NAME', 
  p_description =>'Ensures Oracle Agent SNMP read-only configuration file (snmp_ro.ora) is owned by Oracle software owner',
  p_description_nlsid =>'SNMP_RO_OWNER_DESC',
  p_impact => 'The Oracle Agent SNMP read-only configuration file (snmp_ro.ora) contains the listening address of the agent, the names of SQL*Net listener and Oracle database services it knows about, plus tracing parameters. A publicly accessible SNMP read-only configuration file can be used to extract sensitive data like the tracing directory location, dbsnmp address, etc.',
  p_impact_nlsid =>'SNMP_RO_OWNER_IMPACT',
  p_recommendation =>'Restrict permissions of Oracle Agent SNMP read-only configuration file (snmp_ro.ora) to the owner of Oracle software set and DBA group.',
  p_recommendation_nlsid =>'SNMP_RO_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle Agent SNMP read-only configuration file (snmp_ro.ora) owner is %owner%.',
  p_message_nlsid =>'SNMP_RO_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<SNMP_RW_OWNER>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'snmp_rwOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'snmp_rw.ora Owner', 
      p_metric_label_nlsid => 'SNMP_RW_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  snmp_rw.ora file',
      p_description_nlsid => 'SNMP_RW_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''snmp_rw_owner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Snmp_rw_Owner',   --Policy name
  p_metric_name =>'snmp_rwOwnerRep',      --Metric name
  p_policy_label_nlsid =>'SNMP_RW_OWNER_NAME', 
  p_description =>'Ensures Oracle Agent SNMP read-write configuration file (snmp_rw.ora) is owned by Oracle software owner',
  p_description_nlsid =>'SNMP_RW_OWNER_DESC',
  p_impact => 'The Oracle Agent SNMP read-write configuration file (snmp_ro.ora) contains the listening address of the agent, the names of SQL*Net listener and Oracle database services it knows about, plus tracing parameters. A publicly accessible SNMP read-write configuration file can be used to extract sensitive data like the tracing directory location, dbsnmp address, etc.',
  p_impact_nlsid =>'SNMP_RW_OWNER_IMPACT',
  p_recommendation =>'Restrict permissions of Oracle Agent SNMP read-write configuration file (snmp_rw.ora) to the owner of Oracle software set and DBA group',
  p_recommendation_nlsid =>'SNMP_RW_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle Agent SNMP read-write configuration file (snmp_rw.ora) owner is %owner%.',
  p_message_nlsid =>'SNMP_RW_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<WDBSVR_OWNER>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'wdbsvrOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'wdbsvr.app Owner', 
      p_metric_label_nlsid => 'WDBSVR_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  wdbsvr.app file',
      p_description_nlsid => 'WDBSVR_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''wdbsvr_owner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Wdbsvr_Owner',   --Policy name
  p_metric_name =>'wdbsvrOwnerRep',      --Metric name
  p_policy_label_nlsid =>'WDBSVR_OWNER_NAME', 
  p_description =>'Ensures Oracle HTTP Server mod_plsql configuration file (wdbsvr.app) is owned by Oracle software owner',
  p_description_nlsid =>'WDBSVR_OWNER_DESC',
  p_impact => 'The Oracle Agent SNMP read-write configuration file (snmp_rw.ora) contains the listening address of the agent, the names of SQL*Net listener and Oracle database services it knows about, plus tracing parameters. A publicly accessible SNMP read-write configuration file can be used to extract sensitive data like the tracing directory location, dbsnmp address, etc.',
  p_impact_nlsid =>'WDBSVR_OWNER_IMPACT',
  p_recommendation =>'Restrict permissions of Oracle HTTP Server mod_plsql configuration file (wdbsvr.app) to the owner of Oracle software set and DBA group.',
  p_recommendation_nlsid =>'WDBSVR_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle HTTP Server mod_plsql configuration file (wdbsvr.app) owner is %owner%.',
  p_message_nlsid =>'WDBSVR_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<XSQL_OWNER>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'xsqlOwnerRep',    
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,                
      p_metric_label => 'XSQLConfig.xml Owner', 
      p_metric_label_nlsid => 'XSQL_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  XSQLConfig.xml file',
      p_description_nlsid => 'XSQL_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''xsql_owner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Xsql_Owner',   --Policy name
  p_metric_name =>'xsqlOwnerRep',      --Metric name
  p_policy_label_nlsid =>'XSQL_OWNER_NAME', 
  p_description =>'Ensures Oracle XSQL configuration file (XSQLConfig.xml) is owned by Oracle software owner',
  p_description_nlsid =>'XSQL_OWNER_DESC',
  p_impact => 'The Oracle XSQL configuration file (XSQLConfig.xml) contains sensitive database connection information. A publicly accessible XSQL configuration file can expose the database username and password that can be used access sensitive data or to launch further attacks.',
  p_impact_nlsid =>'XSQL_OWNER_IMPACT',
  p_recommendation =>'Restrict permissions of Oracle XSQL configuration file (XSQLConfig.xml) to the owner of Oracle software set and DBA group.',
  p_recommendation_nlsid =>'XSQL_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System  is in an insecure state. The Oracle XSQL configuration file (XSQLConfig.xml) owner is %owner%.',
  p_message_nlsid =>'XSQL_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList    
);
COMMIT ;

---------------<<HTACCESS>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'permission',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Permission ',
                p_column_label_nlsid =>'PERM_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'filename',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Filename',
                p_column_label_nlsid =>'FILE_NAME_COL'), 
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'htaccessRep',	
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,

p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,    			
      p_metric_label => '.htaccess  Permission', 
      p_metric_label_nlsid => 'HTACCESS_METRIC_LABEL',
      p_description  => 'Collect permissions of  .htaccess file',
      p_description_nlsid => 'HTACCESS_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as permission, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''htperm''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Htaccess',   --Policy name
  p_metric_name =>'htaccessRep',      --Metric name
  p_policy_label_nlsid =>'HTACCESS_NAME', 
  p_description =>'Ensures Oracle HTTP Server Distributed Configuration Files permissions are limited to the Oracle software set and DBA group',
  p_description_nlsid =>'HTACCESS_DESC',
  p_impact => 'The Oracle HTTP Server distributed configuration file (usually .htaccess) is used for access control and authentication of web folders. This file can be modified to gain access to pages containing sensitive information.',
  p_impact_nlsid =>'HTACCESS_IMPACT',
  p_recommendation =>'Restrict Oracle HTTP Server Distributed configuration files access to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'HTACCESS_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle HTTP Server Distributed configuration file %filename% has %permission% permission.',
  p_message_nlsid =>'HTACCESS_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList	
);
COMMIT ;

---------------<<HTACCESS>>-------------------------

--------------->>HTACCESS_OWNER<<-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'htaccessOwnerRep',	
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,    			
      p_metric_label => '.htaccess Owner', 
      p_metric_label_nlsid => 'HTACCESS_OWNER_METRIC_LABEL',
      p_description  => 'Collect  owner of  .htaccess file',
      p_description_nlsid => 'HTACCESS_OWNER_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as owner, '
                 ||'value2 as filename, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''htowner''', 
      p_snapshot_name_list => l_snapshot_list_inst_10gR2,
      p_metric_column_list => l_metric_column_list  
 );
COMMIT;

-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'owner'),
 MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'filename'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));
 ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Htaccess_Owner',   --Policy name
  p_metric_name =>'htaccessOwnerRep',      --Metric name
  p_policy_label_nlsid =>'HTACCESS_OWNER_NAME', 
  p_description =>'Ensures Oracle HTTP Server distributed configuration file ownership is restricted to the Oracle software set and DBA group',
  p_description_nlsid =>'HTACCESS_OWNER_DESC',
  p_impact => 'The Oracle HTTP Server distributed configuration file (usually .htaccess) is used for access control and authentication of web folders. This file can be modified to gain access to pages containing sensitive information.',
  p_impact_nlsid =>'HTACCESS_OWNER_IMPACT',
  p_recommendation =>'Restrict Oracle HTTP Server distributed configuration file ownership to the Oracle software set and DBA group.',
  p_recommendation_nlsid =>'HTACCESS_OWNER_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'System is in an insecure state. The Oracle HTTP Server Distributed configuration file %filename% owner is %owner%.',
  p_message_nlsid =>'HTACCESS_OWNER_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList	
);
COMMIT ;

---------------<<SELECT_ANY_TABLE>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY(' ')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'path',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Path ',
                p_column_label_nlsid =>'PATH_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'grantee',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Grantee',
                p_column_label_nlsid =>'GRANTEE_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'select_any_tableRep',	
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,    			
      p_metric_label => 'Select any table privilege', 
      p_metric_label_nlsid => 'SELECT_ANY_TABLE_METRIC_LABEL',
      p_description  => 'Collect entites granted select any table privilege',
      p_description_nlsid => 'SELECT_ANY_TABLE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as path, '
                 ||'value2 as grantee, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''select_any_table''', 
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'select_any_tableRep',	
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      --p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,    			
      p_metric_label => 'Select any table privilege', 
      p_metric_label_nlsid => 'SELECT_ANY_TABLE_METRIC_LABEL',
      p_description  => 'Collect entites granted select any table privilege',
      p_description_nlsid => 'SELECT_ANY_TABLE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as path, '
                 ||'value2 as grantee, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''select_any_table''', 
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

-- Policy
  l_ctxList := MGMT_VIOL_CTXT_DEF_ARRAY(
        MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'path'),
 MGMT_VIOL_CTXT_DEF.NEW(
                p_metric_column => 'grantee'));
  l_defaultSettingsList := MGMT_POLICY_KEY_VAL_ARRAY(
      MGMT_POLICY_KEY_VAL.NEW(
                p_importance => MGMT_GLOBAL.G_IMPORTANCE_NORMAL));

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Select_Any_Table',   --Policy name
  p_metric_name =>'select_any_tableRep',      --Metric name
  p_policy_label_nlsid =>'SELECT_ANY_TABLE_NAME', 
  p_description =>'Ensures SELECT ANY PRIVILEGE is never granted to any user or role',
  p_description_nlsid =>'SELECT_ANY_TABLE_DESC',
  p_impact => 'The SELECT ANY TABLE privilege can be used to grant users or roles with the ability to view data in tables that are not owned by them. A malicious user with access to any user account that has this privilege can use this to gain access to sensitive data.',
  p_impact_nlsid =>'SELECT_ANY_TABLE_IMPACT',
  p_recommendation =>'Never grant SELECT ANY TABLE privilege.',
  p_recommendation_nlsid =>'SELECT_ANY_TABLE_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. SELECT ANY TABLE privilege granted.',
  p_message_nlsid =>'SELECT_ANY_TABLE_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList	
);
COMMIT ;

ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Select_Any_Table',   --Policy name
  p_metric_name =>'select_any_tableRep',      --Metric name
  p_policy_label_nlsid =>'SELECT_ANY_TABLE_NAME', 
  p_description =>'Ensures SELECT ANY PRIVILEGE is never granted to any user or role',
  p_description_nlsid =>'SELECT_ANY_TABLE_DESC',
  p_impact => 'The SELECT ANY TABLE privilege can be used to grant users or roles with the ability to view data in tables that are not owned by them. A malicious user with access to any user account that has this privilege can use this to gain access to sensitive data.',
  p_impact_nlsid =>'SELECT_ANY_TABLE_IMPACT',
  p_recommendation =>'Never grant SELECT ANY TABLE privilege.',
  p_recommendation_nlsid =>'SELECT_ANY_TABLE_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. SELECT ANY TABLE privilege granted.',
  p_message_nlsid =>'SELECT_ANY_TABLE_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList	
);
COMMIT ;
---------------<<SELECT_ANY_TABLE>>-------------------------

---------------<<SELECT_PRIVILEGE>>-------------------------
  l_valid_if_list := MGMT_VALIDIF_ARRAY(
       MGMT_VALIDIF_OBJ.NEW(
            p_catprop_3_choices => MGMT_CATEGORY_PROP_ARRAY('DB')));
 l_metric_column_list := MGMT_METRIC_COLUMN_ARRAY(
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'path',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Path ',
                p_column_label_nlsid =>'PATH_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'grantee',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_TRUE,
                p_column_label => 'Grantee',
                p_column_label_nlsid =>'GRANTEE_COL'),
       MGMT_METRIC_COLUMN_OBJ.NEW(
                p_column_name => 'dummy',
                p_column_type => MGMT_GLOBAL.G_METRIC_TYPE_STRING,
                p_is_key => MGMT_GLOBAL.G_FALSE,
                p_column_label => 'DUMMY',
                p_column_label_nlsid =>'DUMMY_COL'));

MGMT_METRIC.CREATE_METRIC(
      p_target_type => ESM.DB_TARGET_TYPE,
      p_metric_name => 'select_privilegeRep',	
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
      p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,    			
      p_metric_label => 'Select privilege to any DBA_ view', 
      p_metric_label_nlsid => 'SELECT_PRIVILEGE_METRIC_LABEL',
      p_description  => 'Collect  entities granted select privilege to DBA_ view',
      p_description_nlsid => 'SELECT_PRIVILEGE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as path, '
                 ||'value2 as grantee, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''select_privilege''', 
      p_snapshot_name_list => l_snapshot_list,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

MGMT_METRIC.CREATE_METRIC(
      p_target_type => 'rac_database',
      p_metric_name => 'select_privilegeRep',	
      p_type_meta_ver => ESM.DB_TYPE_META_VERSION,
   --   p_valid_if_list => l_valid_if_list,
      p_metric_type => l_metric_type, 
      p_usage_type => MGMT_GLOBAL.G_USAGE_HIDDEN_COLLECT,    			
      p_metric_label => 'Select privilege to any DBA_ view', 
      p_metric_label_nlsid => 'SELECT_PRIVILEGE_METRIC_LABEL',
      p_description  => 'Collect  entities granted select privilege to DBA_ view',
      p_description_nlsid => 'SELECT_PRIVILEGE_METRIC_DESC',
      p_is_repository => MGMT_GLOBAL.G_TRUE ,
      p_author => ESM.METRIC_AUTHOR,
      p_source_type => MGMT_GLOBAL.G_METRIC_SOURCE_QUERY,
      p_source => 'SELECT target_guid, value as path, '
                 ||'value2 as grantee, value as dummy FROM esm_collection_latest  '
                 ||'WHERE property=''select_privilege''', 
      p_snapshot_name_list => l_snapshot_list_rac,
      p_metric_column_list => l_metric_column_list  
 );

COMMIT;

ESM.CREATE_POLICY(
  p_target_type => ESM.DB_TARGET_TYPE,
  p_policy_name =>'Select_Privilege',   --Policy name
  p_metric_name =>'select_privilegeRep',      --Metric name
  p_policy_label_nlsid =>'SELECT_PRIVILEGE_NAME', 
  p_description =>'Ensures SELECT privilege is never granted to any DBA_ view',
  p_description_nlsid =>'SELECT_PRIVILEGE_DESC',
  p_impact => 'The DBA_* views provide access to privileges and policy settings of the database. Some of these views also allow viewing of sensitive PL/SQL code that can be used to understand the security policies.',
  p_impact_nlsid =>'SELECT_PRIVILEGE_IMPACT',
  p_recommendation =>'None of the DBA_ views should be granted SELECT privileges. If there are users with the SELECT privilege, ensure all access to the DBA_ view is audited.',
  p_recommendation_nlsid =>'SELECT_PRIVILEGE_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. Granted Select Privilege to  DBA_ views can be misused.',
  p_message_nlsid =>'SELECT_PRIVILEGE_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList	
);
COMMIT ;

ESM.CREATE_POLICY(
  p_target_type => 'rac_database',
  p_policy_name =>'Select_Privilege',   --Policy name
  p_metric_name =>'select_privilegeRep',      --Metric name
  p_policy_label_nlsid =>'SELECT_PRIVILEGE_NAME', 
  p_description =>'Ensures SELECT privilege is never granted to any DBA_ view',
  p_description_nlsid =>'SELECT_PRIVILEGE_DESC',
  p_impact => 'The DBA_* views provide access to privileges and policy settings of the database. Some of these views also allow viewing of sensitive PL/SQL code that can be used to understand the security policies.',
  p_impact_nlsid =>'SELECT_PRIVILEGE_IMPACT',
  p_recommendation =>'None of the DBA_ views should be granted SELECT privileges. If there are users with the SELECT privilege, ensure all access to the DBA_ view is audited.',
  p_recommendation_nlsid =>'SELECT_PRIVILEGE_RECOMM',
  p_violation_level =>MGMT_GLOBAL.G_SEVERITY_WARNING,
  p_condition_type =>MGMT_GLOBAL.G_CONDITION_SQL,
  p_condition =>'rownum > 0',
  p_message =>'Database is in an insecure state. Granted Select Privilege to  DBA_ views can be misused.',
  p_message_nlsid =>'SELECT_PRIVILEGE_MESG',
  p_cs_consider_percentage =>MGMT_GLOBAL.G_FALSE,
  p_start_type_meta_ver => ESM.DB_TYPE_META_VERSION,
  p_dflt_param_val_list =>l_defaultSettingsList,
  p_viol_ctxt_list =>l_ctxList	
);
COMMIT ;
---------------<<SELECT_PRIVILEGE>>-------------------------

END ;
/
show errors ;
SET ESCAPE OFF ;

Ms-Dos/Windows Unix Write backup

jsp File Browser version 1.2 by www.vonloesch.de