Detections
Analytics

7.13 Secure the external routine role

Information

The EXTERNALROUTINE role grants the authority to a user to create user-defined functions and procedures in a specific database. It is recommended that the EXTERNALROUTINE role be granted to authorized users only.

Review all users that have access to this authority.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Revoke this permission from any unauthorized users.
1. Connect to the DB2 database.
db2 => connect to $DB2INSTANCE user $USERNAME using $PASSWORD
2. Run the following command from the DB2 command window:
db2 => REVOKE CREATE_EXTERNAL_ROUTINE ON DATABASE FROM USER <username>

See Also

https://workbench.cisecurity.org/files/1654

Item Details

Plugin: IBM_DB2DB

Control ID: 9f7c1d27e6d8c596b4a4c81c2b27ef0247be9ff301503cad72e3a0e9c6e40bea