Enable auditing of database administrator access

CaoCấp 1Xem xét thủ côngdb2-zos

Mô tả

Database administrators manage databases and objects in a database or all databases in the system. Security administrators manage security objects and access control. Auditing tasks performed by database administrators and security administrators can help detect unauthorized or malicious activities that are intended to do harm to Db2 data or the processing environment.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

3.1 Audit considerations 3.1.1 Ensure that audit tracing is enabled during Db2 start up (Manual)   3.1.2 Ensure that critical audit traces are always enabled (Manual)   3.1.3 Ensure that authorization failures are audited (Manual)   3.1.4 Enable audit policies to audit installation system administrator and system operator access (Manual)   3.1.5 Enable auditing of system administrator access (Manual)   3.1.6 Enable auditing of database administrator access (Manual)   Appendix: Change History Date Version Changes for this version Jun 1, 2022 ... (full steps: CIS section 3.1.6)

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

For Db2 internal security users: Enable AUDITPOLICIES with the DBADMIN category to audit system DBADM, DATAACCESS, ACCESSCTRL, SECADM, database DBADM, DBCTRL, and DBMAINT authorities. For external security users: Specify AUDIT(ALL) for the Db2 administrator profiles in RACF and start SMF 80 trace.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: db2-zosaudit
Tham chiếu: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 3.1.6 Enable auditing of database administrator access