Enable Extended Security (DB2_EXTSECURITY)

中级别 1人工审核db2

说明

The DB2_EXTSECURITY registry variable determines whether extended security is enabled on Windows. Extended security enables file permissions for all Db2 objects so they can be accessed by users in DB2ADMNS and DB2USERS groups. It is recommended that extended security be enabled. This registry variable only applies to Db2 Servers running on Windows. DB2_EXTSECURITY applies to Windows servers only, so it is reviewed manually.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

erify that extended security is enabled by running the following command: db2set -all | grep DB2_EXTSECURITY The above command should yield a value of ON.

修复方式

修复方法: 操作指南或基础设施补丁

Run the following command to enable extended security (consult documentation for additional options as appropriate): db2extsec

属性

操作系统: 任意
标签: db2databasemanual
参考: CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.2.4 Enable Extended Security (DB2_EXTSECURITY)