Details

Periodic review of the domain list assigned to the DB2DOMAINLIST environment variable helps ensure that non-essential domains do not have unnecessary authorizations.

Solution

Alter the value of the DB2DOMAINLIST environment variable so that it includes only the appropriate domains.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6

Source

• Tenable.com/audits