Review Roles Granted to PUBLIC

보통레벨 1수동 검토db2

설명

Granting to PUBLIC increases the risk of unauthorized entry into the database. Because PUBLIC is accessible by any database user, it is important to understand the exposure it has on all database objects. It would make sense to grant role membership to PUBLIC if all users required all the privileges granted through that role.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the following: db2 => select grantee, rolename from syscat.roleauth where grantee = 'PUBLIC' If the value returned is blank, that is considered a Pass.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To remove a role member from a particular role: 1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the following: db2 => revoke role <role name> from PUBLIC

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.5 Review Roles Granted to PUBLIC