Secure Db2 Runtime Library

СреднийУровень 1Ручная проверкаdb2

Описание

A Db2 software installation will place all executables under the default <DB2PATH>\sqllib directory. This directory needs to be secured so it grants only the necessary access to authorized users and administrators. Default: Linux ; $DB2PATH/NODE000x/sqldbdir is owned by the Db2 administrator with read, write, and execute access. Windows ; $DB2PATH\NODE000x\sqldbdir ...

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Perform the following to obtain the value for this setting: For Windows: 1. Connect to the Db2 host 2. Right-click on the NODE000x\sqldbdir directory 3. Choose Properties 4. Select the Security tab 5. Determine the permissions for DB administrator accounts and all other accounts For Linux: 1. Connect to the Db2 host 2. Change to the NODE000x/sqldbdir directory 3. Determine the permissions for the directory $ ls -al

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

For Windows: 1. Connect to the Db2 host 2. Right-click on the NODE000x\sqldbdir directory 3. Choose Properties 4. Select the Security tab 5. Select all DB administrator accounts and grant them the Full Control authority 6. Select all other accounts and revoke all privileges other than Read and Execute For Linux: 1. Connect to the Db2 host 2. Change to the /NODE000x/sqldbdir directory 3. Change the permission level of the directory to this recommended value $ chmod -R 755

Свойства

Операционные системы: Любая
Теги: db2databasemanual
Источник: CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.3.1 Secure Db2 Runtime Library