Details

The DB2 instance manages the database environment and sets the configuration parameters. It is recommended that only administrators are allowed to start and stop the DB2 instance.

Only allowing privileged users to start and stop the DB2 instance will help ensure that the DB2 instance is controlled by authorized administrators.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

1. Connect to the host
2. Review users and groups that have access to start and stop the DB2 instance
3. Revoke access from any unnecessary users.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1654

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6

Source

• Tenable.com/audits