DB2X-00-000200 - DB2 must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-213670r879511_rule

STIG-ID|DB2X-00-000200

STIG-Legacy|SV-89103

STIG-Legacy|V-74429

Vuln-ID|V-213670

DB2X-00-000300 - DB2 must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals - ldap enabled

800-53|AC-2(1)

CCI|CCI-000015

Rule-ID|SV-213671r879522_rule

STIG-ID|DB2X-00-000300

STIG-Legacy|SV-89105

STIG-Legacy|V-74431

Vuln-ID|V-213671

DB2X-00-000400 - DB2 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies

800-53|AC-3

CCI|CCI-000213

Rule-ID|SV-213672r879530_rule

STIG-ID|DB2X-00-000400

STIG-Legacy|SV-89107

STIG-Legacy|V-74433

Vuln-ID|V-213672

DB2X-00-000500 - DB2 must protect against a user falsely repudiating having performed organization-defined actions - audit policies used

800-53|AU-10

CCI|CCI-000166

Rule-ID|SV-213673r879554_rule

STIG-ID|DB2X-00-000500

STIG-Legacy|SV-89109

STIG-Legacy|V-74435

Vuln-ID|V-213673

DB2X-00-000500 - DB2 must protect against a user falsely repudiating having performed organization-defined actions - database policies

DB2X-00-000500 - DB2 must protect against a user falsely repudiating having performed organization-defined actions - table policies

DB2X-00-000600 - DB2 must provide audit record generation capability for DoD-defined auditable events within all DBMS/database components

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-213674r879559_rule

STIG-ID|DB2X-00-000600

STIG-Legacy|SV-89111

STIG-Legacy|V-74437

Vuln-ID|V-213674

DB2X-00-000700 - DB2 must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited

800-53|AU-12b.

CCI|CCI-000171

Rule-ID|SV-213675r879560_rule

STIG-ID|DB2X-00-000700

STIG-Legacy|SV-89113

STIG-Legacy|V-74439

Vuln-ID|V-213675

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - database policies

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-213676r879561_rule

STIG-ID|DB2X-00-000800

STIG-Legacy|SV-89115

STIG-Legacy|V-74441

Vuln-ID|V-213676

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSCOLAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSDBAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSINDEXAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSLIBRARYAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSMODULEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSPASSTHRUAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSPLANAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSROLEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSROUTINEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSCHEMAAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSECURITYLABELACCESS

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSECURITYPOLICYEXEMPTIONS

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSEQUENCEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSSURROGATEAUTHIDS

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSTABAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSTBSPACEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSUSERAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSVARIABLEAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSWORKLOADAUTH

DB2X-00-000800 - DB2 must generate audit records when privileges/permissions are retrieved - table SYSIBM.SYSXSROBJECTAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - database policies

Rule-ID|SV-213677r879561_rule

STIG-ID|DB2X-00-000900

STIG-Legacy|SV-89117

STIG-Legacy|V-74443

Vuln-ID|V-213677

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSCOLAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSDBAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSINDEXAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSLIBRARYAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSMODULEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSPASSTHRUAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSPLANAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSROLEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSROUTINEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSCHEMAAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSECURITYLABELACCESS

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSECURITYPOLICYEXEMPTIONS

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSEQUENCEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSSURROGATEAUTHIDS

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSTABAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSTBSPACEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSUSERAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSVARIABLEAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSWORKLOADAUTH

DB2X-00-000900 - DB2 must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur - SYSIBM.SYSXSROBJECTAUTH

DB2X-00-001000 - DB2 must initiate session auditing upon startup - AUDIT

800-53|AU-14(1)

CCI|CCI-001464

Rule-ID|SV-213678r879562_rule

STIG-ID|DB2X-00-001000

STIG-Legacy|SV-89119

STIG-Legacy|V-74445

Vuln-ID|V-213678

DB2X-00-001000 - DB2 must initiate session auditing upon startup - CHECKING

DB2X-00-001000 - DB2 must initiate session auditing upon startup - CONTEXT

DB2X-00-001000 - DB2 must initiate session auditing upon startup - EXECUTE

DB2X-00-001000 - DB2 must initiate session auditing upon startup - OBJMAINT

DB2X-00-001000 - DB2 must initiate session auditing upon startup - Review user policies

DB2X-00-001000 - DB2 must initiate session auditing upon startup - SECMAINT

DB2X-00-001000 - DB2 must initiate session auditing upon startup - SYSADMIN

DB2X-00-001000 - DB2 must initiate session auditing upon startup - VALIDATE

DB2X-00-001600 - DB2 must produce audit records containing sufficient information to establish the outcome (success or failure) of the events

800-53|AU-3

CCI|CCI-000134

Rule-ID|SV-213679r879567_rule

STIG-ID|DB2X-00-001600

STIG-Legacy|SV-89121

STIG-Legacy|V-74447

Vuln-ID|V-213679

DB2X-00-001800 - DB2 must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

800-53|AU-3(1)

CCI|CCI-000135

Rule-ID|SV-213680r879569_rule

STIG-ID|DB2X-00-001800

STIG-Legacy|SV-89123

STIG-Legacy|V-74449

Vuln-ID|V-213680

DB2X-00-001900 - Unless it has been determined that availability is paramount, DB2 must, upon audit failure, cease all auditable activity.

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-213681r879571_rule

STIG-ID|DB2X-00-001900

STIG-Legacy|SV-89125

STIG-Legacy|V-74451

Vuln-ID|V-213681

DB2X-00-002500 - DB2 must protect its audit features from unauthorized access

800-53|AU-9

CCI|CCI-001493

Rule-ID|SV-213685r879579_rule

STIG-ID|DB2X-00-002500

STIG-Legacy|SV-89133

STIG-Legacy|V-74459

Vuln-ID|V-213685

DB2X-00-002600 - DB2 must protect its audit configuration from unauthorized modification

CCI|CCI-001494

Rule-ID|SV-213686r879580_rule

STIG-ID|DB2X-00-002600

STIG-Legacy|SV-89135

STIG-Legacy|V-74461

Vuln-ID|V-213686

DB2X-00-002700 - DB2 must protect its audit features from unauthorized removal

CCI|CCI-001495

Rule-ID|SV-213687r879581_rule

STIG-ID|DB2X-00-002700

STIG-Legacy|SV-89137

STIG-Legacy|V-74463

Vuln-ID|V-213687

DB2X-00-002800 - DB2 must limit  privileges to change software modules, to include stored procedures, functions and triggers, and links to software external to DB2.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-213688r879586_rule

STIG-ID|DB2X-00-002800

STIG-Legacy|SV-89139

STIG-Legacy|V-74465

Vuln-ID|V-213688

DB2X-00-003000 - The DB2 software installation account must be restricted to authorized users.

Rule-ID|SV-213690r879586_rule

STIG-ID|DB2X-00-003000

STIG-Legacy|SV-89143

STIG-Legacy|V-74469

Vuln-ID|V-213690

DB2X-00-003200 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to DB2, etc.) must be owned by database/DBMS principals authorized for ownership

Rule-ID|SV-213692r879586_rule

STIG-ID|DB2X-00-003200

STIG-Legacy|SV-89147

STIG-Legacy|V-74473

Vuln-ID|V-213692

DB2X-00-003300 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to DB2, etc.) must be restricted to authorized users - s used to modify database structure and logic modules must be restricted to authorized users.

Rule-ID|SV-213693r879586_rule

STIG-ID|DB2X-00-003300

STIG-Legacy|SV-89149

STIG-Legacy|V-74475

Vuln-ID|V-213693

DB2X-00-003600 - Unused database components which are integrated in DB2 and cannot be uninstalled must be disabled.

Detections

Analytics

DISA STIG IBM DB2 v10.5 LUW v2r1 Database

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous