TMAegis
Više pravila za db2-zos

TMA-DB2-ZOS-2.1.8

Secure application access by using package controls

SrednjaNivo 1Ručni pregleddb2-zos

Opis

The BIND options, ENABLE and DISABLE determine the connection types for a specific plan or package. It is recommended that you use these options to control the connection types for applications. Restricting applications to use approved connection types prevents unauthorized access.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

1. Issue the following SQL statement to determine the approved connection types for a specific package or a plan. SELECT PKS.SYSTEM, PKS.ENABLE, PKS.CNAME FROM SYSIBM.SYSPACKAGE PK, SYSIBM.SYSPKSYSTEM PKS WHERE PK.COLLID = PKS.COLLID AND PK.NAME = PKS.NAME; SELECT PLS.SYSTEM, PLS.ENABLE, PLS.CNAME FROM SYSIBM.SYSPLAN PL, SYSIBM.SYSPLSYSTEM PLS WHERE PL.NAME = PLS.NAME; 2. Review the output.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Issue the BIND PACKAGE / BIND PLAN / REBIND PACKAGE / REBIND PLAN command with the ENABLE and DISABLE option to specify an approved connection type based on the rules of your organization.

Svojstva

Operativni sistemi
Bilo koji
Oznake
db2-zospermissions
Referenca
CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.8 Secure application access by using package controls