TMA-DB2-7.1.4
Ensure Audit is Enabled Within the Instance
VisokaNivo 1Automatskadb2
Opis
Auditing is crucial for securing and discovering issues within your databases. Auditing can help trigger events for changes to data objects, table DML, and user access. 'db2audit describe' must report Audit active: "TRUE". Run as SYSADM (instance owner). Run as the instance owner (or with sqllib/db2profile sourced) so the db2 CLP reads this instance's configuration.
Kako se proverava
Metod provere: Komanda ljuske
shell
out=$(db2audit describe 2>/dev/null) || exit 1; if printf '%s\n' "$out" | grep -Eiq 'Audit active: *"TRUE'; then echo compliant; else echo noncompliant; fi- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Issue the following command to activate instance level auditing: $ db2audit start
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- db2databaseloggingaudit
- Referenca
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 7.1.4 Ensure Audit is Enabled Within the Instance
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target db2