Details

If the permissions on the DB2 communication exit library directories are not set properly, the contents of those directories could be misused, tampered with, or otherwise accessed to negatively impact the security of the server.

Solution

The database manager looks for communication exit libraries in the following directories:

Linux 32-bit: $DB2PATH/security32/plugin/commexit
Linux 64-bit: $DB2PATH/security64/plugin/commexit
Windows 32-bit and 64-bit: $DB2PATHsecurityplugincommexitinstance_name

After locating the directory, update its permissions. The following is an example for a Linux 64-bit system:

[[email protected] plugin]$ pwd
/opt/ibm/db2/V10.5/security64/plugin
[[email protected] IBM]$ chmod -R 750 commexit

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This control applies to the following type of system Unix.

References

• CSCv6|3.1

Source

• Tenable.com/audits