Secure CONNECT Authority

SedangLevel 1Tinjauan manualdb2

Deskripsi

The CONNECT role grants the authority to a user to connect to mainframe and midrange databases from Windows, Unix, and Linux operating systems. It is recommended that the CONNECT role be granted to authorized users only.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => select distinct grantee, granteetype from syscat.dbauth where connectauth = 'Y' 3. Review the list of users, groups, and roles in the above output to ensure only approved users, groups, and roles are assigned.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Revoke this permission from any unauthorized users. 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => REVOKE CONNECT ON DATABASE FROM USER <username>

Properti

Sistem operasi: Apa saja
Tag: db2databasemanual
Referensi: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.1.13 Secure CONNECT Authority