Ensure that Db2 USS file system is protected

보통레벨 1수동 검토db2-zos

설명

The USS file system that contains Db2 product code, such as the IBM Data Server Driver for JDBC and SQLJ, Db2 supplied Java classes, Db2 Java stored procedures support code, and native DLL libraries must be protected from unauthorized modifications or deletions. The USS file systems that contain system and product code must be restricted to authorized personnel and audited. Failure to protect can result in a loss of system services.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Starting with the directory with pathname /usr/lpp/db2x10 (where 'x' represents the release indicator) and for each of the sub-directories, issue the following command to review the directory and file permissions. ls -l [pathname]

조치 방법

조치 방식: 가이드 또는 인프라 패치

Issue the chmod command to change the access permission as needed.

속성

운영 체제: 모두
태그: db2-zospermissions
참고 자료: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 1.1.2 Ensure that Db2 USS file system is protected