Details

The db2system parameter specifies the DB2 system name that is used by users and database administrators to identify the DB2 server. It is recommended that this parameter be set to a value that does not represent sensitive aspects of the system.

Exposing OS or DB revision information may provide malicious users with enough information to identify vulnerabilities that may be present in the platforms.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

1. Attach to the DB2 instance.
db2 => attach to $DB2INSTANCE
3. Run the following command from the DB2 command window:
db2 => update database configuration using db2system
Default Value:
The default value for DB2SYSTEM is the hostname.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1654

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CSCv6|3.1

Source

• Tenable.com/audits