Detections
Analytics

6.1.19 Secure Schema ACCESSCTRL Authority

Information

The Schema ACCESSCTLR authority allows a user grant and revoke privileges within a specific schema. It is recommended that the Schema ACCESSCTRL authority be granted to authorized users only.

If an account that possesses this authority is compromised or used in a malicious manner, the confidentiality, integrity, and availability of data in the database will be at increased risk.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Revoke this permission from any unauthorized users.

 - Connect to the Db2 database. db2 => connect to <dbname>
 - Run the following command: db2 => REVOKE ACCESSCTRL ON SCHEMA <schema> FROM USER <username>

See Also

https://workbench.cisecurity.org/benchmarks/23492

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: IBM_DB2DB

Control ID: 620393683fa5b7b1731d620f0c20c17c1d522c00dc48ba4ea9e9e0f5d0f397bc