TMA-DB2-6.2.6
Review Role Grantees with WITH ADMIN OPTION
Descripción
Using the WITH ADMIN OPTION clause of the GRANT (Role) SQL statement, the security administrator can delegate the management and control of membership in a role to someone else.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => select rolename, grantee, admin from syscat.roleauth where grantortype <> 'S' and admin = 'Y' If the value returned is blank, that is considered a Pass.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => revoke admin option for role <role name> from user <user name>
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- db2databasemanual
- Referencia
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.6 Review Role Grantees with WITH ADMIN OPTION