Details

The DB2 administration server responds to remote requests from administration tools and client utilities. It is recommended that only administrators are allowed to start and stop the DB2 administration server.

Allowing only privileged users to start and stop the DB2 administration server will help ensure that the DB2 administration server is controlled by authorized administrators.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

1. Connect to the host
2. Review users and groups that have access to start and stop the DB2 instance
3. Revoke access from any unnecessary users.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1654

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6

Source

• Tenable.com/audits