TMA-DB2-4.1.12
Ensure a Secure Connect Procedure is Used (CONNECT_PROC)
Deskripsi
The CONNECT_PROC stored procedure runs as part of every connection to the database and allows customization of the application environment, such as setting special registers. It could for example, set the CURRENT_PATH special register which controls the search path for finding functions and procedures to execute. Only an authorized procedure should be used.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Perform the following Db2 commands to determine if a CONNECT_PROC procedure is being used: 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => get database configuration 3. Locate the CONNECT_PROC value in the output: Connect procedure (CONNECT_PROC) = If the value is not set, this is a Pass. If a value is set, it should be reviewed to ensure it is an appropriate procedure to be run for every connection.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
To turn off the connect proc, perform the following commands: 1. Connect to the Db2 database db2 => connect to <dbname> 2. Run the following command: db2 => update database configuration using connect_proc NULL IMMEDIATE
Properti
- Sistem operasi
- Apa saja
- Tag
- db2databasemanual
- Referensi
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 4.1.12 Ensure a Secure Connect Procedure is Used (CONNECT_PROC)