Secure Permissions for Alternate Diagnostic Log Path (ALT_DIAGPATH)

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

For both Windows and Linux Perform the following Db2 commands to obtain the location of the directory: 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => get database manager configuration 3. Locate the ALT_DIAGPATH value in the output: Alternate diagnostic data directory path (ALT_DIAGPATH) = <valid directory> Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click over the diagnostic log directory 3. Choose Properties 4. Select the Security tab 5. Review the access for all accounts Additional steps for Linux: 1. Connect to ...

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

For Windows and Linux To change the directory for the diagnostic logs: 1. Attach to the Db2 instance db2 => attach to <db2instance> 2. Run the following command: db2 => update database manager configuration using ALT_DIAGPATH <valid directory> Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click over the diagnostic log directory 3. Choose Properties 4. Select the Security tab 5. Grant the Full Control authority to all Db2 administrator accounts 6. Grant only read and execute privileges to all other accounts (revoke any other privileges) Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the diagnostic log directory 3. Change the permissions of the directory $ chmod -R 3777 .