Details

With row and column access control, individuals are permitted access to only the subset of data that is required to perform their job tasks. Periodic review of these individuals is crucial when trying to keep data secure. As business needs move forward, requirements behind accessing the data may change, leading to a revision in security policy. By inspecting the list of users, groups, and roles, you are identifying excessive privileges that could pose possible security threats within your infrastructure.

Solution

1. To remove users from your database environment-
Linux-
userdel -r
Windows-
1. Run compmgmt.msc
2. Click ‘Local Users and Groups’
3. Double click ‘Users’
4. Right-click on
5. Select ‘Delete’
2. To remove groups from your database environment-
Linux-
groupdel
Windows-
1. Run compmgmt.msc
2. Click ‘Local Users and Groups’
3. Double click ‘Groups’
4. Right-click on
5. Select ‘Delete’
3. To remove roles or role members from your database environment
a. Attach to DB2 Instance-
db2 => attach to $DB2INSTANCE
b. Connect to DB2 database-
db2 => connect to $DBNAME
c. To remove role members from roles-
db2 => revoke role from
d. To remove roles-
db2 => drop role

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6(7)

Source

• Tenable.com/audits