Disable DAS discoverability
Details The discover parameter specifies the discovery mode for the DB2 Administration Server. It is recommended that this parameter be...
- Home
- Security Hardening
- CIS IBM DB2 9 Benchmark V3.0.1 L2 OS Linux
CIS IBM DB2 9 Benchmark V3.0.1 L2 OS Linux
Disable unused task scheduler
Details The sched_enable parameter specifies whether the DB2 Task Center utility is allowed to schedule and execute tasks at the...Encrypt user data across the network
Details DB2 supports a number of authentication mechanisms. It is recommended that the DATA_ENCRYPT authentication mechanism be used. The DATA_ENCRYPT...Establish an administrator group
Details The sysadm_group parameter defines the system administrator group with SYSADM authority for the DB2 instance. Accounts with this authority...Establish a system control group
Details The sysctrl_group parameter defines the system administrator group with system control (SYSCTRL) authority. It is recommended that the sysctrl_group...Install the latest fix packs
Details Periodically, IBM releases fix packs to enhance features and resolve defects, including security defects. It is recommended that the...Prevent execution of expired tasks
Details The exec_exp_task parameter controls whether the DB2 Scheduler will initialize past tasks that were scheduled but not yet executed....Remove default databases
Details A DB2 Instance may come installed with default databases. It is recommended that the SAMPLE database be removed. Removing...Reserve the desired port number or name for incoming connection requests
Details The svcename parameter reserves the port number (or name, on Linux hosts) for listening to incoming communications from a...Reserve the desired port number or name for incoming SSL connections
Details The ssl_svcename configuration parameter defines the name or number of the port the database server listens for incoming communications...