IBM Db2
TMA-DB2-6.2.1
Review Users, Groups, and Roles
Descrição
With row and column access control, individuals are permitted access to only the subset of data that is required to perform their job tasks. Periodic review of these individuals is crucial when trying to keep data secure. As business needs move forward, requirements behind accessing the data may change, leading to a revision in security policy. By inspecting the list of users, groups, and ...
Como é verificado
Método de auditoria: Revisão manual
1. Review the users within your database environment: o Linux: cat /etc/passwd o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Users' 4. Review users 2. Review the groups within your database environment: o Linux: cat /etc/group o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Groups' 4. Review groups 3. Review the roles and role members within your database environment: 1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the command: db2 => select rolename, grantee from syscat.roleauth where grantortype <> 'S'
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
1. To remove users from your database environment: o Linux: userdel -r <user name> o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Users' 4. Right-click on 5. Select 'Delete' 2. To remove groups from your database environment: o Linux: groupdel -r <group name> o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Groups' 4. Right-click on 5. Select 'Delete' 3. To remove roles or role members from your database environment: 1. Connect to Db2 database: db2 => connect to <dbname> 2. To remove role members from roles: db2 => revoke role <role name> from <userroup/role member> 3. To remove roles: db2 => drop role <role name>
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- db2databasemanual
- Referência
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.1 Review Users, Groups, and Roles