3.3.7 Disable unused task scheduler

Information

The sched_enable parameter specifies whether the DB2 Task Center utility is allowed to schedule and execute tasks at the administration server. It is recommended that this parameter be set to OFF when the Task Scheduler is not in use.

Enable this feature only when scheduling and executing tasks from the DB2 Task Center utility is necessary. This will ensure that malicious tasks are not executed unknowingly by the DB2 server.

Solution

1. Attach to the DB2 instance.
db2 => attach to $DB2INSTANCE
2. Run the following command from the DB2 command window:
db2 => update admin configuration using sched_enable off
Default Value:
The default value for SCHED_ENABLE is OFF.
4 Label-Based Access Controls (LBAC)
This section provides guidance on a new feature in DB2 V9.1 that can control the read and write access of a user at the table column and row level. This feature is a separately licensed component of DB2; therefore, apply these settings where appropriate.

See Also

https://workbench.cisecurity.org/files/1654

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: 311bb32f1a50ea5be816d02393cdd7519f2bb39699ada5cde75a680194eecb11