TMAegis
More rules for db2

TMA-DB2-5.10

DB2CHGPWD_EEE Registry Variable

MediumLevel 1Manual reviewdb2

Description

The DB2CHGPWD_EEE registry variable specifies whether users are able to change passwords through Db2 in a partitioned database environment. It is recommended to set this variable to NO.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify that the DB2CHGPWD_EEE registry variable is set to the correct location by running the following command: db2set -all

How it is fixed

Fix method: Guidance or infrastructure patch

Run the following command to set the DB2CHGPWD_EEE registry variable to NO: db2set DB2CHGPWD_EEE=NO

Properties

Operating systems
Any
Tags
db2databasemanual
Reference
CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.10 DB2CHGPWD_EEE Registry Variable