Authenticate federated users at the instance level – ‘fed_noauth = no’
Details NOTE : Update DB2_VERSION to the appropriate value for your local environment. Supportive Information The following resource is also...
- Home
- Security Hardening
- CIS IBM DB2 OS L2 V1.2.0
CIS IBM DB2 OS L2 V1.2.0
Auto-restart after abnormal termination – ‘autorestart = on’
Details NOTE : Update DB2_VERSION to the appropriate value for your local environment. Supportive Information The following resource is also...Disable DAS discoverability – ‘discover = disable’
Details The discover parameter specifies the discovery mode for the DB2 Administration Server. Supportive Information The following resource is also...Disable database discover – ‘discover_db = disable’
Details The discover_db parameter specifies if the database will respond to a discovery request from a client. Supportive Information The...Disable data links support – ‘datalinks = no’
Details Datalinks enables the database to support the Data Links Manager to manage unstructured data, such as images, large files...Disable instance discoverability – ‘discover_inst = disable’
Details It is recommended that instances be undiscoverable. Supportive Information The following resource is also helpful. https://workbench.cisecurity.org/files/155 This security hardening...Disable unused task scheduler – ‘sched_enable = off’
Details NOTE : Update DB2_VERSION to the appropriate value for your local environment. Supportive Information The following resource is also...Do not execute expired tasks – ‘exec_exp_task = no’
Details NOTE : Update DB2_VERSION to the appropriate value for your local environment. Supportive Information The following resource is also...Enable audit buffer – ‘audit_buf_sz <= 1000'
Details DB2 can be configured to use an audit buffer. Supportive Information The following resource is also helpful. https://workbench.cisecurity.org/files/155 This...Enable Backup Redundancy
Details Backup redundancy is the process of ensuring that multiple instances of database backups exist. NOTE: Nessus has not performed...