Review Role Grantees with WITH ADMIN OPTION

СредњаНиво 1Ручни прегледdb2

Опис

Using the WITH ADMIN OPTION clause of the GRANT (Role) SQL statement, the security administrator can delegate the management and control of membership in a role to someone else.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => select rolename, grantee, admin from syscat.roleauth where grantortype <> 'S' and admin = 'Y' If the value returned is blank, that is considered a Pass.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => revoke admin option for role <role name> from user <user name>

Својства

Оперативни системи: Било који
Ознаке: db2databasemanual
Референца: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.6 Review Role Grantees with WITH ADMIN OPTION