TMAegis
db2-zos için daha fazla kural

Db2 for z/OS

TMA-DB2-ZOS-1.1.2

Ensure that Db2 USS file system is protected

OrtaDüzey 1Manuel incelemedb2-zos

Açıklama

The USS file system that contains Db2 product code, such as the IBM Data Server Driver for JDBC and SQLJ, Db2 supplied Java classes, Db2 Java stored procedures support code, and native DLL libraries must be protected from unauthorized modifications or deletions. The USS file systems that contain system and product code must be restricted to authorized personnel and audited. Failure to protect can result in a loss of system services.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Starting with the directory with pathname /usr/lpp/db2x10 (where 'x' represents the release indicator) and for each of the sub-directories, issue the following command to review the directory and file permissions. ls -l [pathname]

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Issue the chmod command to change the access permission as needed.

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
db2-zospermissions
Referans
CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 1.1.2 Ensure that Db2 USS file system is protected