Ensure that grant authorization IDs are defined in RACF

ÉlevéeNiveau 1Revue manuelledb2-zos

Description

When Db2 native security is used for access control, you can grant privileges to users or groups using the SQL GRANT statement. If privileges are granted to an authorization- name, it is recommended that you also define the grantee users or groups in RACF. Defining an authorization ID in RACF provides user accountability and prevents unauthorized access through orphan grantees.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Issue the RACF LISTGRP and LISTUSER commands to determine if the authorization IDs are defined in RACF and review the output.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Issue the RACF ADDUSER and ADDGROUP commands to define the authorization IDs in RACF.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: db2-zoshardening
Référence: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.9 Ensure that grant authorization IDs are defined in RACF