Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH)

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

For Windows and Linux Perform the following Db2 commands to obtain the directory location: 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => get database configuration 3. Locate the OVERFLOWLOGPATH value in the output: Overflow log path (OVERFLOWLOGPATH) = Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow log directory 3. Choose Properties 4. Select the Security tab 5. Review and verify the privileges for all accounts Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log ...

조치 방법

조치 방식: 가이드 또는 인프라 패치

For Windows and Linux: 1. Connect to the Db2 database db2 => connect to <dbname> 2. Run the following command to change the mirror log directory, if necessary: db2 => update database configuration using overflowlogpath <valid directory> Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow archive log directory 3. Choose Properties 4. Select the Security tab 5. Grant all Db2 administrator accounts the Full Control authority 6. Grant all other accounts read and execute privileges only (revoke all other privileges) Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log directory 3. Change the permissions for the directory $ chmod -R 755