Secure the Database Container Directory

中级别 1人工审核db2

说明

A Db2 database container is the physical storage of the data.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Review all users that have access to the directory of the containers. On Linux and AIX ensure that only the instance owner has access to the directory of the containers and the container files themselves. On Windows only administrators, and if extended security is enabled, members of the DB2ADMINS group should have access to the directory of the containers and the container files. No other users should have access.

修复方式

修复方法: 操作指南或基础设施补丁

On Linux and AIX, set the privileges for the directory of the containers so that only the instance owner has full access, and all other users have no access. On Windows, set the privileges for the directory of the containers and the container files so that only administrators, and if extended security is enabled members of the DB2ADMINS group, have full access, and all other users have no access.

属性

操作系统: 任意
标签: db2databasemanual
参考: CIS IBM Db2 12.1 Benchmark v1.0.0 - 3.3.2 Secure the Database Container Directory