TMAegis
db2-zos için daha fazla kural

TMA-DB2-ZOS-1.2.3

Ensure that the default authorization IDs are changed from the installation defined

YüksekDüzey 1Manuel incelemedb2-zos

Açıklama

The following subsystem parameters specify default authorization IDs. It Is recommended to change the installation-specified default values and ensure the authorization IDs are defined in RACF. SYSTEM ADMIN 1 - Specifies the first of two authorization IDs to which installation SYSADM authority is assigned.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Run the DSNTEJ6Z job to obtain the current values of the SYSTEM ADMIN 1, SYSTEM ADMIN 2, SYSTEM OPERATOR 1, SYSTEM OPERATOR 2, SECURITY ADMIN 1, SECURITY ADMIN 2, and UNKNOWN AUTHID subsystem parameters. Verify that the default values are changed.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

1. Edit the DSNTIJUZ job and set the default values for SYSTEM ADMIN 1, SYSTEM ADMIN 2, SYSTEM OPERATOR 1, SYSTEM OPERATOR 2, SECURITY ADMIN 1, SECURITY ADMIN 2, and UNKNOWN AUTHID subsystem parameters. 2. Submit DSNTIJUZ to assemble the subsystem parameters. 3. Issue the -SET SYSPARM command or stop and restart Db2 to activate the changes.

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
db2-zoshardening
Referans
CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 1.2.3 Ensure that the default authorization IDs are changed from the installation defined