TMA-DB2-7.1.4

Ensure Audit is Enabled Within the Instance

높음레벨 1자동db2

설명

Auditing is crucial for securing and discovering issues within your databases. Auditing can help trigger events for changes to data objects, table DML, and user access. 'db2audit describe' must report Audit active: "TRUE". Run as SYSADM (instance owner). Run as the instance owner (or with sqllib/db2profile sourced) so the db2 CLP reads this instance's configuration.

점검 방법

감사 방식: 셸 명령

shell

out=$(db2audit describe 2>/dev/null) || exit 1; if printf '%s\n' "$out" | grep -Eiq 'Audit active: *"TRUE'; then echo compliant; else echo noncompliant; fi

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Issue the following command to activate instance level auditing: $ db2audit start

속성

운영 체제: 모두
태그: db2databaseloggingaudit
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 7.1.4 Ensure Audit is Enabled Within the Instance

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target db2