Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH)

SedangLevel 1Tinjauan manualdb2

Deskripsi

The OVERFLOWLOGPATH parameter specifies a location for Db2® databases to find log files needed for a rollforward operation, as well as where to store active log files retrieved from the archive. It also gives a location for finding and storing log files needed for using db2ReadLog API. It is recommended that the directory used be set to full access for Db2 administrator accounts and read and ...

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

For Windows and Linux Perform the following Db2 commands to obtain the directory location: 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => get database configuration 3. Locate the OVERFLOWLOGPATH value in the output: Overflow log path (OVERFLOWLOGPATH) = Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow log directory 3. Choose Properties 4. Select the Security tab 5. Review and verify the privileges for all accounts Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log ...

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

For Windows and Linux: 1. Connect to the Db2 database db2 => connect to <dbname> 2. Run the following command to change the mirror log directory, if necessary: db2 => update database configuration using overflowlogpath <valid directory> Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow archive log directory 3. Choose Properties 4. Select the Security tab 5. Grant all Db2 administrator accounts the Full Control authority 6. Grant all other accounts read and execute privileges only (revoke all other privileges) Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log directory 3. Change the permissions for the directory $ chmod -R 755

Properti

Sistem operasi: Apa saja
Tag: db2databasemanual
Referensi: CIS IBM Db2 12.1 Benchmark v1.0.0 - 4.1.8 Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH)