TMA-DB2-ZOS-2.1.9

Ensure that grant authorization IDs are defined in RACF

높음레벨 1수동 검토db2-zos

설명

When Db2 native security is used for access control, you can grant privileges to users or groups using the SQL GRANT statement. If privileges are granted to an authorization- name, it is recommended that you also define the grantee users or groups in RACF. Defining an authorization ID in RACF provides user accountability and prevents unauthorized access through orphan grantees.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Issue the RACF LISTGRP and LISTUSER commands to determine if the authorization IDs are defined in RACF and review the output.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Issue the RACF ADDUSER and ADDGROUP commands to define the authorization IDs in RACF.

속성

운영 체제: 모두
태그: db2-zoshardening
참고 자료: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.9 Ensure that grant authorization IDs are defined in RACF