Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH)

MoyenneNiveau 1Revue manuelledb2

Description

The OVERFLOWLOGPATH parameter specifies a location for Db2® databases to find log files needed for a rollforward operation, as well as where to store active log files retrieved from the archive. It also gives a location for finding and storing log files needed for using db2ReadLog API. It is recommended that the directory used be set to full access for Db2 administrator accounts and read and ...

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

For Windows and Linux Perform the following Db2 commands to obtain the directory location: 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => get database configuration 3. Locate the OVERFLOWLOGPATH value in the output: Overflow log path (OVERFLOWLOGPATH) = Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow log directory 3. Choose Properties 4. Select the Security tab 5. Review and verify the privileges for all accounts Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log ...

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

For Windows and Linux: 1. Connect to the Db2 database db2 => connect to <dbname> 2. Run the following command to change the mirror log directory, if necessary: db2 => update database configuration using overflowlogpath <valid directory> Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow archive log directory 3. Choose Properties 4. Select the Security tab 5. Grant all Db2 administrator accounts the Full Control authority 6. Grant all other accounts read and execute privileges only (revoke all other privileges) Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log directory 3. Change the permissions for the directory $ chmod -R 755

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: db2databasemanual
Référence: CIS IBM Db2 12.1 Benchmark v1.0.0 - 4.1.8 Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH)