TMA-DB2-7.1.4
Ensure Audit is Enabled Within the Instance
TinggiLevel 1Otomatisdb2
Deskripsi
Auditing is crucial for securing and discovering issues within your databases. Auditing can help trigger events for changes to data objects, table DML, and user access. 'db2audit describe' must report Audit active: "TRUE". Run as SYSADM (instance owner). Run as the instance owner (or with sqllib/db2profile sourced) so the db2 CLP reads this instance's configuration.
Cara pemeriksaan
Metode audit: Perintah shell
shell
out=$(db2audit describe 2>/dev/null) || exit 1; if printf '%s\n' "$out" | grep -Eiq 'Audit active: *"TRUE'; then echo compliant; else echo noncompliant; fi- Output yang diharapkan
compliant
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Issue the following command to activate instance level auditing: $ db2audit start
Properti
- Sistem operasi
- Apa saja
- Tag
- db2databaseloggingaudit
- Referensi
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 7.1.4 Ensure Audit is Enabled Within the Instance
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target db2