3.2.3 Disable database discovery

Information

The discover_db parameter specifies if the database will respond to a discovery request from a client. It is recommended that this parameter be set to DISABLE.
Rationale:
Disabling database discovery can hide a database with sensitive data.

Solution

1. Connect to the DB2 database.
db2 => connect to $DB2INSTANCE user $USERNAME using $PASSWORD
2. Run the following command from the DB2 command window:
db2 => update database configuration using discover_db disable
Default Value:
The default value for DISCOVER_DB is ENABLE.

See Also

https://workbench.cisecurity.org/files/1654