Home
Security Hardening
DISA STIG IBM DB2 V10.5LUW V1R4 OS Windows

DISA STIG IBM DB2 V10.5LUW V1R4 OS Windows

DB2X-00-008100 – DB2 and the operating system must enforce access restrictions associated with changes to the configuration of DB2 or database(s).
Details Failure to provide logical access restrictions associated with changes to configuration may have significant effects on the overall security...
DB2X-00-008200 – DB2 must produce audit records of its enforcement of access restrictions associated with changes to the configuration of DB2 or database(s) – OS Auditing
Details Without auditing the enforcement of access restrictions against changes to configuration, it would be difficult to identify attempted attacks...
DB2X-00-008300 – DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SSL
Details Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats. Solution Use the following...
DB2X-00-005800 – Access to database files must be limited to relevant processes and to authorized, administrative users – Instance
Details Applications, including DBMSs, must prevent unauthorized and unintended information transfer via shared system resources. Permitting only DBMS processes and...
DB2X-00-005800 – Access to database files must be limited to relevant processes and to authorized, administrative users – LOGARCHMETH
Details Applications, including DBMSs, must prevent unauthorized and unintended information transfer via shared system resources. Permitting only DBMS processes and...
DB2X-00-005800 – Access to database files must be limited to relevant processes and to authorized, administrative users – Transaction Paths
Details Applications, including DBMSs, must prevent unauthorized and unintended information transfer via shared system resources. Permitting only DBMS processes and...
DB2X-00-007300 – DB2 must utilize centralized management of the content captured in audit records generated by all components of DB2.
Details Without the ability to centrally manage the content captured in the audit records, identification, troubleshooting, and correlation of suspicious...
DB2X-00-008300 – DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SSL_SVCENAME
Details Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats. Solution Use the following...
DB2X-00-008300 – DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SVCENAME
Details Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats. Solution Use the following...
DB2X-00-009100 – DB2 must maintain the confidentiality and integrity of information during preparation for transmission.
Details Information can be either unintentionally or maliciously disclosed or modified during preparation for transmission, including, for example, during aggregation,...

Prev Next

DISA STIG IBM DB2 V10.5LUW V1R4 OS Windows

DB2X-00-008100 – DB2 and the operating system must enforce access restrictions associated with changes to the configuration of DB2 or database(s).

DB2X-00-008200 – DB2 must produce audit records of its enforcement of access restrictions associated with changes to the configuration of DB2 or database(s) – OS Auditing

DB2X-00-008300 – DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SSL

DB2X-00-005800 – Access to database files must be limited to relevant processes and to authorized, administrative users – Instance

DB2X-00-005800 – Access to database files must be limited to relevant processes and to authorized, administrative users – LOGARCHMETH

DB2X-00-005800 – Access to database files must be limited to relevant processes and to authorized, administrative users – Transaction Paths

DB2X-00-007300 – DB2 must utilize centralized management of the content captured in audit records generated by all components of DB2.

DB2X-00-008300 – DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SSL_SVCENAME

DB2X-00-008300 – DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SVCENAME

DB2X-00-009100 – DB2 must maintain the confidentiality and integrity of information during preparation for transmission.