Review Users, Groups, and Roles

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Review the users within your database environment: o Linux: cat /etc/passwd o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Users' 4. Review users 2. Review the groups within your database environment: o Linux: cat /etc/group o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Groups' 4. Review groups 3. Review the roles and role members within your database environment: 1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the command: db2 => select rolename, grantee from syscat.roleauth where grantortype <> 'S'

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. To remove users from your database environment: o Linux: userdel -r <user name> o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Users' 4. Right-click on 5. Select 'Delete' 2. To remove groups from your database environment: o Linux: groupdel -r <group name> o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Groups' 4. Right-click on 5. Select 'Delete' 3. To remove roles or role members from your database environment: 1. Connect to Db2 database: db2 => connect to <dbname> 2. To remove role members from roles: db2 => revoke role <role name> from <userroup/role member> 3. To remove roles: db2 => drop role <role name>