DB2X-00-000300 - DB2 must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals

800-53|AC-2(1)

CAT|II

CCI|CCI-000015

Rule-ID|SV-213671r879522_rule

STIG-ID|DB2X-00-000300

STIG-Legacy|SV-89105

STIG-Legacy|V-74431

Vuln-ID|V-213671

DB2X-00-002200 - The audit information produced by DB2 must be protected from unauthorized read access

800-53|AU-9

CCI|CCI-000162

Rule-ID|SV-213682r879576_rule

STIG-ID|DB2X-00-002200

STIG-Legacy|SV-89127

STIG-Legacy|V-74453

Vuln-ID|V-213682

DB2X-00-002300 - The audit information produced by DB2 must be protected from unauthorized modification

CCI|CCI-000163

Rule-ID|SV-213683r879577_rule

STIG-ID|DB2X-00-002300

STIG-Legacy|SV-89129

STIG-Legacy|V-74455

Vuln-ID|V-213683

DB2X-00-002400 - The audit information produced by DB2 must be protected from unauthorized deletion

CCI|CCI-000164

Rule-ID|SV-213684r879578_rule

STIG-ID|DB2X-00-002400

STIG-Legacy|SV-89131

STIG-Legacy|V-74457

Vuln-ID|V-213684

DB2X-00-002900 - The OS must limit privileges to change the DB2 software resident within software libraries (including privileged programs)

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-213689r879586_rule

STIG-ID|DB2X-00-002900

STIG-Legacy|SV-89141

STIG-Legacy|V-74467

Vuln-ID|V-213689

DB2X-00-003100 - Database software, including DBMS configuration files, must be stored in dedicated directories, separate from the host OS and other applications

Rule-ID|SV-213691r879586_rule

STIG-ID|DB2X-00-003100

STIG-Legacy|SV-89145

STIG-Legacy|V-74471

Vuln-ID|V-213691

DB2X-00-003400 - Default demonstration and sample databases, database objects, and applications must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-213694r879587_rule

STIG-ID|DB2X-00-003400

STIG-Legacy|SV-89151

STIG-Legacy|V-74477

Vuln-ID|V-213694

DB2X-00-003500 - Unused database components, DBMS software, and database objects must be removed.

Rule-ID|SV-213695r879587_rule

STIG-ID|DB2X-00-003500

STIG-Legacy|SV-89153

STIG-Legacy|V-74479

Vuln-ID|V-213695

DB2X-00-003800 - DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-213698r917662_rule

STIG-ID|DB2X-00-003800

STIG-Legacy|SV-89159

STIG-Legacy|V-74485

Vuln-ID|V-213698

DB2X-00-003800 - DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

DB2X-00-004100 - If passwords are used for authentication, DB2 must transmit only encrypted representations of passwords

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-213699r917664_rule

STIG-ID|DB2X-00-004100

STIG-Legacy|SV-89161

STIG-Legacy|V-74487

Vuln-ID|V-213699

DB2X-00-004600 - DB2 must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations

800-53|IA-7

CAT|I

CCI|CCI-000803

Rule-ID|SV-213702r917666_rule

STIG-ID|DB2X-00-004600

STIG-Legacy|SV-89167

STIG-Legacy|V-74493

Vuln-ID|V-213702

DB2X-00-005100 - DB2 must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values

800-53|SC-23(3)

CCI|CCI-001188

Rule-ID|SV-213704r879639_rule

STIG-ID|DB2X-00-005100

STIG-Legacy|SV-89171

STIG-Legacy|V-74497

Vuln-ID|V-213704

DB2X-00-005300 - In the event of a system failure, DB2 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes

800-53|SC-24

CCI|CCI-001665

Rule-ID|SV-213705r879641_rule

STIG-ID|DB2X-00-005300

STIG-Legacy|SV-89173

STIG-Legacy|V-74499

Vuln-ID|V-213705

DB2X-00-005300 - In the event of a system failure, DB2 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes - Recovery Plan

DB2X-00-005300 - In the event of a system failure, DB2 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes - Tested

DB2X-00-005800 - Access to database files must be limited to relevant processes and to authorized, administrative users

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-213709r879649_rule

STIG-ID|DB2X-00-005800

STIG-Legacy|SV-89181

STIG-Legacy|V-74507

Vuln-ID|V-213709

DB2X-00-007300 - DB2 must utilize centralized management of the content captured in audit records generated by all components of DB2.

800-53|AU-3(2)

CCI|CCI-001844

Rule-ID|SV-213719r879729_rule

STIG-ID|DB2X-00-007300

STIG-Legacy|SV-89241

STIG-Legacy|V-74567

Vuln-ID|V-213719

DB2X-00-007500 - DB2 must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

800-53|AU-4

CCI|CCI-001849

Rule-ID|SV-213720r879730_rule

STIG-ID|DB2X-00-007500

STIG-Legacy|SV-89243

STIG-Legacy|V-74569

Vuln-ID|V-213720

DB2X-00-007600 - DB2 must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.

800-53|AU-5(1)

CCI|CCI-001855

Rule-ID|SV-213721r879732_rule

STIG-ID|DB2X-00-007600

STIG-Legacy|SV-89245

STIG-Legacy|V-74571

Vuln-ID|V-213721

DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.

800-53|AU-5(2)

CCI|CCI-001858

Rule-ID|SV-213722r879733_rule

STIG-ID|DB2X-00-007700

STIG-Legacy|SV-89247

STIG-Legacy|V-74573

Vuln-ID|V-213722

DB2X-00-008100 - DB2 and the operating system must enforce access restrictions associated with changes to the configuration of DB2 or database(s)

800-53|CM-5(1)

CCI|CCI-001813

Rule-ID|SV-213724r879753_rule

STIG-ID|DB2X-00-008100

STIG-Legacy|SV-89265

STIG-Legacy|V-74591

Vuln-ID|V-213724

DB2X-00-008200 - DB2 must produce audit records of its enforcement of access restrictions associated with changes to the configuration of DB2 or database(s) - OS Auditing

CCI|CCI-001814

Rule-ID|SV-213725r879754_rule

STIG-ID|DB2X-00-008200

STIG-Legacy|SV-89267

STIG-Legacy|V-74593

Vuln-ID|V-213725

DB2X-00-008300 - DB2 must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance

800-53|CM-7(1)(b)

CCI|CCI-001762

Rule-ID|SV-213726r879756_rule

STIG-ID|DB2X-00-008300

STIG-Legacy|SV-89269

STIG-Legacy|V-74595

Vuln-ID|V-213726

DB2X-00-009100 - DB2 must maintain the confidentiality and integrity of information during preparation for transmission.

800-53|SC-8(2)

CCI|CCI-002420

Rule-ID|SV-213731r917668_rule

STIG-ID|DB2X-00-009100

STIG-Legacy|SV-89279

STIG-Legacy|V-74605

Vuln-ID|V-213731

DB2X-00-009200 - DB2 must maintain the confidentiality and integrity of information during reception.

CCI|CCI-002422

Rule-ID|SV-213732r917670_rule

STIG-ID|DB2X-00-009200

STIG-Legacy|SV-89281

STIG-Legacy|V-74607

Vuln-ID|V-213732

DB2X-00-012600 - DB2 must off-load audit data to a separate log management facility; this must be continuous and in near real time for systems with a network connection to the storage facility and weekly or more often for stand-alone systems.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-213762r879886_rule

STIG-ID|DB2X-00-012600

STIG-Legacy|SV-89249

STIG-Legacy|V-74575

Vuln-ID|V-213762

DISA_STIG_IBM_DB2_v10.5_LUW_v2r1_OS_Linux.audit from DISA IBM DB2 V10.5 LUW v2r1 STIG

Detections

Analytics

DISA STIG IBM DB2 v10.5 LUW v2r1 OS Linux

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous