Details

DB2 can be configured to allow users that do not possess the SYSADM authority to catalog and uncatalog databases and nodes. It is recommended that the catalog_noauth parameter be set to NO.

Solution

Perform the following to require explicit authorization to catalog and uncatalog databases and nodes.
1. Attach to the DB2 instance
db2 => attach to $DB2INSTANCE
2. Run the following command from the DB2 command window-
db2 => update database manager configuration using catalog_noauth no

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6(5)
• CSCv6|5.1

Source

• Tenable.com/audits