Ensure Audit is Enabled Within the Instance

AltaNivel 1Automatizadadb2

Descripción

Auditing is crucial for securing and discovering issues within your databases. Auditing can help trigger events for changes to data objects, table DML, and user access. 'db2audit describe' must report Audit active: "TRUE". Run as SYSADM (instance owner). Run as the instance owner (or with sqllib/db2profile sourced) so the db2 CLP reads this instance's configuration.

Cómo se verifica

Método de auditoría: Comando de shell

shell

out=$(db2audit describe 2>/dev/null) || exit 1; if printf '%s\n' "$out" | grep -Eiq 'Audit active: *"TRUE'; then echo compliant; else echo noncompliant; fi

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Issue the following command to activate instance level auditing: $ db2audit start

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: db2databaseloggingaudit
Referencia: CIS IBM Db2 12.1 Benchmark v1.0.0 - 7.1.4 Ensure Audit is Enabled Within the Instance

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target db2