Enable audit policies to audit installation system administrator and system operator access

高レベル 1手動レビューdb2-zos

説明

Installation system administrators and installation system operators perform Db2 installation and migration. The installation system administrator role also includes most of the administrative authority, which can perform important tasks such as starting and stopping Db2, controlling traces, accessing all data, and granting and revoking privileges from other users.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Issue the following SQL statement to verify that audit policy is enabled to audit installation SYSADM, installation SYSOPR, or all authorities in SYSADMIN category: SELECT AUDITPOLICYNAME FROM SYSIBM.SYSAUDITPOLICIES WHERE SYSADMIN IN ('I','R','*');

修正方法

修正方法: ガイダンスまたは IaC パッチ

Enable AUDITPOLICIES with the SYSADMIN category to audit installation SYSADM and installation SYSOPR authorities.

プロパティ

オペレーティングシステム: すべて
タグ: db2-zosaudit
参照: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 3.1.4 Enable audit policies to audit installation system administrator and system operator access