1.4 Use non-default account names

Information

The DB2 service is installed with default accounts with well-known names such as db2admin, db2inst1, dasusr1, or db2fenc1. It is recommended that the use of these account names be avoided. The default accounts may be renamed and then used.

Solution

For each account with a default name, either change the name to a name that is not well-known or delete the account if it is not needed.

See Also

https://workbench.cisecurity.org/files/162

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2f.

Plugin: Unix

Control ID: 1035b185d04b9e471d3f2145cea3c63f2d8a013dcdd73e177995897e4d387ae8