Specify a Secure Location for External Tables (EXTBL_LOCATION)

보통레벨 1수동 검토db2

설명

The EXTBL_LOCATION database configuration parameter provides an allow list of paths that external tables may access for local files, for both reading and writing. It is recommended that this value be set to appropriate paths with the understanding that confidential data may reside in this directory. Specifying appropriate paths is part of an organizations standard operating procedures (SOP).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Perform the following Db2 commands to determine if a EXTBL_LOCATION is specified: 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => get database configuration 3. Locate the EXTBL_LOCATION value in the output: Allowed paths for external tables (EXTBL_LOCATION) = /home/db2inst1 If the value does not match what has been specified in the SOP, then follow the remediation steps.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To specify an external table location, perform the following commands: 1. Connect to the Db2 database db2 => connect to <dbname> 2. Run the following command: db2 => update database configuration using extbl_location <paths>

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 4.1.13 Specify a Secure Location for External Tables (EXTBL_LOCATION)