DB2X-00-000200 - DB2 must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-89103r1_rule

STIG-ID|DB2X-00-000200

Vuln-ID|V-74429

DB2X-00-000300 - DB2 must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals - ldap enabled

800-53|IA-2

CCI|CCI-000015

Rule-ID|SV-89105r1_rule

STIG-ID|DB2X-00-000300

Vuln-ID|V-74431

DB2X-00-000400 - DB2 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies - AUTHID

CCI|CCI-000213

Rule-ID|SV-89107r2_rule

STIG-ID|DB2X-00-000400

Vuln-ID|V-74433

DB2X-00-000400 - DB2 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies - AUTHIDTYPE

DB2X-00-000400 - DB2 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies - D/ROLE PUBLIC

DB2X-00-000400 - DB2 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies - ROLENAME

DB2X-00-000500 - DB2 must protect against a user falsely repudiating having performed organization-defined actions - audit policies used

800-53|AU-12

CCI|CCI-000166

Rule-ID|SV-89109r1_rule

STIG-ID|DB2X-00-000500

Vuln-ID|V-74435

DB2X-00-000500 - DB2 must protect against a user falsely repudiating having performed organization-defined actions - database policies

DB2X-00-000500 - DB2 must protect against a user falsely repudiating having performed organization-defined actions - table policies

DB2X-00-000600 - DB2 must provide audit record generation capability for DoD-defined auditable events within all DBMS/database components - error types

CCI|CCI-000169

Rule-ID|SV-89111r1_rule

STIG-ID|DB2X-00-000600

Vuln-ID|V-74437

DB2X-00-000600 - DB2 must provide audit record generation capability for DoD-defined auditable events within all DBMS/database components - status

DB2X-00-000700 - DB2 must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited - DBAUTH

800-53|AU-9

CCI|CCI-000171

Rule-ID|SV-89113r1_rule

STIG-ID|DB2X-00-000700

Vuln-ID|V-74439

DB2X-00-000700 - DB2 must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited - SYSADM_GROUP

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - database policies

CCI|CCI-000172

Rule-ID|SV-89115r2_rule

STIG-ID|DB2X-00-000800

Vuln-ID|V-74441

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSCOLAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSDBAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSINDEXAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSLIBRARYAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSMODULEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSPASSTHRUAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSPLANAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSROLEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSROUTINEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSCHEMAAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSECURITYLABELACCESS

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSECURITYPOLICYEXEMPTIONS

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSEQUENCEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSURROGATEAUTHIDS

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSTABAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSTBSPACEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSUSERAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSVARIABLEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSWORKLOADAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSXSROBJECTAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - database policies

Rule-ID|SV-89117r2_rule

STIG-ID|DB2X-00-000900

Vuln-ID|V-74443

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSCOLAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSDBAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSINDEXAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSLIBRARYAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSMODULEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSPASSTHRUAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSPLANAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSROLEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSROUTINEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSCHEMAAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSECURITYLABELACCESS

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSECURITYPOLICYEXEMPTIONS

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSEQUENCEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSURROGATEAUTHIDS

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSTABAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSTBSPACEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSUSERAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSVARIABLEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSWORKLOADAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSXSROBJECTAUTH

DB2X-00-001000 - DB2 must initiate session auditing upon startup - AUDIT

CCI|CCI-001464

Rule-ID|SV-89119r1_rule

STIG-ID|DB2X-00-001000

Vuln-ID|V-74445

DB2X-00-001000 - DB2 must initiate session auditing upon startup - CHECKING

DB2X-00-001000 - DB2 must initiate session auditing upon startup - CONTEXT

DB2X-00-001000 - DB2 must initiate session auditing upon startup - EXECUTE

DB2X-00-001000 - DB2 must initiate session auditing upon startup - OBJMAINT

DB2X-00-001000 - DB2 must initiate session auditing upon startup - Review user policies

DB2X-00-001000 - DB2 must initiate session auditing upon startup - SECMAINT

DB2X-00-001000 - DB2 must initiate session auditing upon startup - SYSADMIN

DB2X-00-001000 - DB2 must initiate session auditing upon startup - VALIDATE

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - AUDIT

CCI|CCI-000134

Rule-ID|SV-89121r1_rule

STIG-ID|DB2X-00-001600

Vuln-ID|V-74447

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - CHECKING

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - CONTEXT

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - ERRORTYPE

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - EXECUTE

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - EXECUTEWITHDATA

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - OBJMAINT

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - SECMAINT

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - SYSADMIN

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - VALIDATE

DB2X-00-001800 - DB2 must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-89123r1_rule

STIG-ID|DB2X-00-001800

Vuln-ID|V-74449

DB2X-00-001900 - Unless it has been determined that availability is paramount, DB2 must, upon audit failure, cease all auditable activity.

CCI|CCI-000140

Rule-ID|SV-89125r1_rule

STIG-ID|DB2X-00-001900

Vuln-ID|V-74451

DB2X-00-002500 - DB2 must protect its audit features from unauthorized access - AUDIT_ARCHIVE Execute

CCI|CCI-001493

Rule-ID|SV-89133r1_rule

STIG-ID|DB2X-00-002500

Vuln-ID|V-74459

DB2X-00-002500 - DB2 must protect its audit features from unauthorized access - DBAUTH

DB2X-00-002500 - DB2 must protect its audit features from unauthorized access - SYSADM_GROUP

DB2X-00-002600 - DB2 must protect its audit configuration from unauthorized modification - AUDIT_ARCHIVE Execute

CCI|CCI-001494

Rule-ID|SV-89135r1_rule

STIG-ID|DB2X-00-002600

Vuln-ID|V-74461

DB2X-00-002600 - DB2 must protect its audit configuration from unauthorized modification - DBAUTH

DB2X-00-002600 - DB2 must protect its audit configuration from unauthorized modification - SYSADM_GROUP

DB2X-00-002700 - DB2 must protect its audit features from unauthorized removal - AUDIT_ARCHIVE Execute

CCI|CCI-001495

Rule-ID|SV-89137r1_rule

STIG-ID|DB2X-00-002700

Vuln-ID|V-74463

DB2X-00-002700 - DB2 must protect its audit features from unauthorized removal - DBAUTH

DB2X-00-002700 - DB2 must protect its audit features from unauthorized removal - SYSADM_GROUP

DB2X-00-002800 - DB2 must limit  privileges to change software modules, to include stored procedures, functions and triggers, and links to software external to DB2.

800-53|AC-6

CCI|CCI-001499

Rule-ID|SV-89139r1_rule

STIG-ID|DB2X-00-002800

Vuln-ID|V-74465

DB2X-00-003000 - The DB2 software installation account must be restricted to authorized users.

Rule-ID|SV-89143r1_rule

STIG-ID|DB2X-00-003000

Vuln-ID|V-74469

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - LIBRARIES

800-53|AC-3

Rule-ID|SV-89147r1_rule

STIG-ID|DB2X-00-003200

Vuln-ID|V-74473

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - MODULES

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - NICKNAMES

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - PACKAGES

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - ROUTINES

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - SEQUENCES

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - TABCONST

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - TABLES

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - TABLESPACES

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership - TRIGGERS

DB2X-00-003300 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to DB2, etc.) must be restricted to authorized users - s used to modify database structure and logic modules must be restricted to authorized users.

Rule-ID|SV-89149r1_rule

STIG-ID|DB2X-00-003300

Vuln-ID|V-74475

DB2X-00-003600 - Unused database components which are integrated in DB2 and cannot be uninstalled must be disabled.

CCI|CCI-000381

Rule-ID|SV-89155r1_rule

STIG-ID|DB2X-00-003600

Vuln-ID|V-74481

DB2X-00-003700 - Access to external executables must be disabled or restricted - External Routine Permissions

Detections

Analytics

DISA STIG IBM DB2 v10.5 LUW v1r4 Database

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous