3.3.2 Set a generic system name

Information

The db2system parameter specifies the DB2 system name that is used by users and database administrators to identify the DB2 server. It is recommended that this parameter be set to a value that does not represent sensitive aspects of the system.

Exposing OS or DB revision information may provide malicious users with enough information to identify vulnerabilities that may be present in the platforms.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

1. Attach to the DB2 instance.
db2 => attach to $DB2INSTANCE
3. Run the following command from the DB2 command window:
db2 => update database configuration using db2system <valid system group>
Default Value:
The default value for DB2SYSTEM is the hostname.

See Also

https://workbench.cisecurity.org/files/1654

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|3.1

Plugin: Windows

Control ID: 5a641e9243ec6f3a88b820d3825d558bc33650e1f90d1bba4a33b0037ec3edbc