Detections
Analytics

7.9 Secure the connect role

Information

The CONNECT role grants the authority to a user to connect to a specific database. It is recommended that the CONNECT role be granted to authorized users only.

Review all users that have access to this authority.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Revoke this permission from any unauthorized users.
1. Connect to the DB2 database.
db2 => connect to $DB2INSTANCE user $USERNAME using $PASSWORD
2. Run the following command from the DB2 command window:
db2 => REVOKE CONNECT ON DATABASE FROM USER <username>

See Also

https://workbench.cisecurity.org/files/1654

Item Details

Plugin: IBM_DB2DB

Control ID: c1989844e66755ac377491d33fbe69070f3534f14bd015a63927b77a6f4deee2