TMAegis
db2-zos için daha fazla kural

TMA-DB2-ZOS-1.1.3

Secure installation process

OrtaDüzey 1Manuel incelemedb2-zos

Açıklama

The installation SYSOPR authority can be used for the installation and migration of a Db2 subsystem. The installation SYSOPR authority is not allowed access to non- system objects or user data in the subsystem. Using the installation SYSOPR authority instead of the installation SYSADM authority prevents unauthorized access to user objects during installation or migration.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Run the DSNTEJ6Z job to obtain the current values of the SYSTEM OPERATOR 1, SYSTEM OPERATOR 2 subsystem parameters. Verify that one of the authorization IDs that is used for installation or migration has the installation SYSOPR authority.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

1. Edit the DSNTIJUZ job and modify the values for the SYSTEM OPERATOR 1 or SYSTEM OPERATOR 2 subsystem parameter as needed. 2. Submit DSNTIJUZ to assemble the subsystem parameter. 3. Issue the -SET SYSPARM command or stop and restart Db2 for the change to take effect.

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
db2-zoshardening
Referans
CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 1.1.3 Secure installation process