Secure Db2 Runtime Library

보통레벨 1수동 검토db2

설명

A Db2 software installation will place all executables under the default <DB2PATH>\sqllib directory. This directory needs to be secured so it grants only the necessary access to authorized users and administrators. Default: Linux ; $DB2PATH/NODE000x/sqldbdir is owned by the Db2 administrator with read, write, and execute access. Windows ; $DB2PATH\NODE000x\sqldbdir ...

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Perform the following to obtain the value for this setting: For Windows: 1. Connect to the Db2 host 2. Right-click on the NODE000x\sqldbdir directory 3. Choose Properties 4. Select the Security tab 5. Determine the permissions for DB administrator accounts and all other accounts For Linux: 1. Connect to the Db2 host 2. Change to the NODE000x/sqldbdir directory 3. Determine the permissions for the directory $ ls -al

조치 방법

조치 방식: 가이드 또는 인프라 패치

For Windows: 1. Connect to the Db2 host 2. Right-click on the NODE000x\sqldbdir directory 3. Choose Properties 4. Select the Security tab 5. Select all DB administrator accounts and grant them the Full Control authority 6. Select all other accounts and revoke all privileges other than Read and Execute For Linux: 1. Connect to the Db2 host 2. Change to the /NODE000x/sqldbdir directory 3. Change the permission level of the directory to this recommended value $ chmod -R 755

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.3.1 Secure Db2 Runtime Library