Secure CONNECT Authority

보통레벨 1수동 검토db2

설명

The CONNECT role grants the authority to a user to connect to mainframe and midrange databases from Windows, Unix, and Linux operating systems. It is recommended that the CONNECT role be granted to authorized users only.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => select distinct grantee, granteetype from syscat.dbauth where connectauth = 'Y' 3. Review the list of users, groups, and roles in the above output to ensure only approved users, groups, and roles are assigned.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Revoke this permission from any unauthorized users. 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => REVOKE CONNECT ON DATABASE FROM USER <username>

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.1.13 Secure CONNECT Authority