Detections
Analytics

6.1.14 Secure LOAD Authority

Information

The LOAD role grants the authority to a user to load data into tables. It is recommended that the LOAD role be granted to authorized users only.

Rationale:

All users that have access to this authority should be regularly reviewed.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Revoke this permission from any unauthorized users.

Connect to the Db2 database.

db2 => connect to <dbname>

Run the following command:

db2 => REVOKE LOAD ON DATABASE FROM USER <username>

See Also

https://workbench.cisecurity.org/benchmarks/23492

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: IBM_DB2DB

Control ID: 4d185397e1175c8fe71a0ed5fe33cc0ef7565a5ec2410a34c82c2362a2968411