DB2X-00-011100 - DB2 must generate audit records when unsuccessful attempts to delete security objects occur

Information

The removal of security objects from the database/DBMS would seriously degrade a system's information assurance posture. If such an action is attempted, it must be logged.

To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.

Solution

Run the following command to define an audit policy with the needed subset using the CREATE AUDIT POLICY SQL statement:
DB2> CREATE AUDIT POLICY <DB audit policy name>
CATEGORIES SECMAINT STATUS BOTH, OBJMAINTSTATUS STATUS BOTH, CONTEXT STATUS BOTH
ERROR TYPE AUDIT

To modify an existing audit policy, replace 'CREATE' with 'ALTER' in the preceding statement. Only the categories explicitly named in the statement will be affected. In this case, the changes take effect immediately.

If CREATE was used above, run the following command to apply the policy created above to the database:
DB2> AUDIT DATABASE USING POLICY <DB audit policy name>

Item Details

Audit Name: DISA STIG IBM DB2 v10.5 LUW v2r1 Database

Category: AUDIT AND ACCOUNTABILITY

Plugin: IBM_DB2DB

Control ID: a158cdb723cacb3abec8a6c28eadacef081ad9b2174974203c0599bfdecc2360

Detections

Analytics

DB2X-00-011100 - DB2 must generate audit records when unsuccessful attempts to delete security objects occur

Information

Solution

See Also

Item Details