TMA-DB2-3.2.4

Enable Extended Security (DB2_EXTSECURITY)

보통레벨 1수동 검토db2

설명

The DB2_EXTSECURITY registry variable determines whether extended security is enabled on Windows. Extended security enables file permissions for all Db2 objects so they can be accessed by users in DB2ADMNS and DB2USERS groups. It is recommended that extended security be enabled. This registry variable only applies to Db2 Servers running on Windows. DB2_EXTSECURITY applies to Windows servers only, so it is reviewed manually.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

erify that extended security is enabled by running the following command: db2set -all | grep DB2_EXTSECURITY The above command should yield a value of ON.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Run the following command to enable extended security (consult documentation for additional options as appropriate): db2extsec

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.2.4 Enable Extended Security (DB2_EXTSECURITY)