Review Roles Granted to PUBLIC

MittelStufe 1Manuelle Prüfungdb2

Beschreibung

Granting to PUBLIC increases the risk of unauthorized entry into the database. Because PUBLIC is accessible by any database user, it is important to understand the exposure it has on all database objects. It would make sense to grant role membership to PUBLIC if all users required all the privileges granted through that role.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the following: db2 => select grantee, rolename from syscat.roleauth where grantee = 'PUBLIC' If the value returned is blank, that is considered a Pass.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

To remove a role member from a particular role: 1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the following: db2 => revoke role <role name> from PUBLIC

Eigenschaften

Betriebssysteme: Beliebig
Tags: db2databasemanual
Referenz: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.5 Review Roles Granted to PUBLIC