Secure the Database Container Directory

MittelStufe 1Manuelle Prüfungdb2

Beschreibung

A Db2 database container is the physical storage of the data.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Review all users that have access to the directory of the containers. On Linux and AIX ensure that only the instance owner has access to the directory of the containers and the container files themselves. On Windows only administrators, and if extended security is enabled, members of the DB2ADMINS group should have access to the directory of the containers and the container files. No other users should have access.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

On Linux and AIX, set the privileges for the directory of the containers so that only the instance owner has full access, and all other users have no access. On Windows, set the privileges for the directory of the containers and the container files so that only administrators, and if extended security is enabled members of the DB2ADMINS group, have full access, and all other users have no access.

Eigenschaften

Betriebssysteme: Beliebig
Tags: db2databasemanual
Referenz: CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.3.2 Secure the Database Container Directory