Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH)

СреднийУровень 1Ручная проверкаdb2

Описание

The OVERFLOWLOGPATH parameter specifies a location for Db2® databases to find log files needed for a rollforward operation, as well as where to store active log files retrieved from the archive. It also gives a location for finding and storing log files needed for using db2ReadLog API. It is recommended that the directory used be set to full access for Db2 administrator accounts and read and ...

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

For Windows and Linux Perform the following Db2 commands to obtain the directory location: 1. Connect to the Db2 database. db2 => connect to <dbname> 2. Run the following command: db2 => get database configuration 3. Locate the OVERFLOWLOGPATH value in the output: Overflow log path (OVERFLOWLOGPATH) = Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow log directory 3. Choose Properties 4. Select the Security tab 5. Review and verify the privileges for all accounts Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log ...

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

For Windows and Linux: 1. Connect to the Db2 database db2 => connect to <dbname> 2. Run the following command to change the mirror log directory, if necessary: db2 => update database configuration using overflowlogpath <valid directory> Additional steps for Windows: 1. Connect to the Db2 host 2. Right-click on the overflow archive log directory 3. Choose Properties 4. Select the Security tab 5. Grant all Db2 administrator accounts the Full Control authority 6. Grant all other accounts read and execute privileges only (revoke all other privileges) Additional steps for Linux: 1. Connect to the Db2 host 2. Change to the overflow log directory 3. Change the permissions for the directory $ chmod -R 755

Свойства

Операционные системы: Любая
Теги: db2databasemanual
Источник: CIS IBM Db2 12.1 Benchmark v1.0.0 - 4.1.8 Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH)