Review Roles Granted to PUBLIC

MediaNivel 1Revisión manualdb2

Descripción

Granting to PUBLIC increases the risk of unauthorized entry into the database. Because PUBLIC is accessible by any database user, it is important to understand the exposure it has on all database objects. It would make sense to grant role membership to PUBLIC if all users required all the privileges granted through that role.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the following: db2 => select grantee, rolename from syscat.roleauth where grantee = 'PUBLIC' If the value returned is blank, that is considered a Pass.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

To remove a role member from a particular role: 1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the following: db2 => revoke role <role name> from PUBLIC

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: db2databasemanual
Referencia: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.5 Review Roles Granted to PUBLIC