Ensure Audit Policies are Enabled Within the Database

높음레벨 1수동 검토db2

설명

Creating and applying audit policies is crucial for securing and discovering issues within your databases. Audit policies can help trigger events for changes to data objects, table DML, and user access.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Connect to the Db2 database. db2 => connect to <dbname> 2. Issue the following command to ensure that at least one audit policy exists and has been associated with an object. The SYSCAT.AUDITUSE catalog view shows all of the audit policies that have been associated with auditing an object within the database. db2=> select * from syscat.audituse 3. If there is at least 1 row then it is considered a Pass. If there are zero rows returned then nothing is being audited within the database and the remediation steps should be followed.

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. Connect to the Db2 database. db2 => connect to <dbname> 2. Issue the following command to create an audit policy. This policy audits all categories. An analysis should be performed to determine which categories are required to meet business needs. db2 => create audit policy AUDITDB CATEGORIES ALL STATUS BOTH ERROR TYPE AUDIT 3. Audit the database using the policy just created with the following command: db2 => audit database using policy AUDITDB

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 7.1.3 Ensure Audit Policies are Enabled Within the Database