IBM Db2
TMA-DB2-6.2.1
Review Users, Groups, and Roles
Опис
With row and column access control, individuals are permitted access to only the subset of data that is required to perform their job tasks. Periodic review of these individuals is crucial when trying to keep data secure. As business needs move forward, requirements behind accessing the data may change, leading to a revision in security policy. By inspecting the list of users, groups, and ...
Како се проверава
Метод провере: Ручни преглед
1. Review the users within your database environment: o Linux: cat /etc/passwd o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Users' 4. Review users 2. Review the groups within your database environment: o Linux: cat /etc/group o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Groups' 4. Review groups 3. Review the roles and role members within your database environment: 1. Connect to Db2 database: db2 => connect to <dbname> 2. Run the command: db2 => select rolename, grantee from syscat.roleauth where grantortype <> 'S'
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
1. To remove users from your database environment: o Linux: userdel -r <user name> o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Users' 4. Right-click on 5. Select 'Delete' 2. To remove groups from your database environment: o Linux: groupdel -r <group name> o Windows: 1. Run compmgmt.msc 2. Click 'Local Users and Groups' 3. Double click 'Groups' 4. Right-click on 5. Select 'Delete' 3. To remove roles or role members from your database environment: 1. Connect to Db2 database: db2 => connect to <dbname> 2. To remove role members from roles: db2 => revoke role <role name> from <userroup/role member> 3. To remove roles: db2 => drop role <role name>
Својства
- Оперативни системи
- Било који
- Ознаке
- db2databasemanual
- Референца
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.1 Review Users, Groups, and Roles