Download PDF - IBM Redbooks

Example 8-10 shows how to display active policies in the DB2 subsystem.
Example 8-10 Displaying the SQL statement auditing policy
DSNW127I -DB0T CURRENT TRACE ACTIVITY IS -
TNO TYPE CLASS DEST QUAL IFCID
06 AUDIT * GTF NO
*********END OF DISPLAY TRACE SUMMARY DATA*********
DSNW143I -DB0T CURRENT TRACE QUALIFICATIONS ARE -
DSNW152I -DB0T BEGIN TNO 06 QUALIFICATIONS:
NO QUALIFICATIONS
END TNO 06 QUALIFICATIONS
DSNW185I -DB0T BEGIN TNO 06 AUDIT POLICIES:
ACTIVE AUDIT POLICY: AUDIT2
END TNO 06 AUDIT POLICIES
DSNW148I -DB0T ******END OF DISPLAY TRACE QUALIFICATION DATA******
DSN9022I -DB0T DSNWVCM1 '-DISPLAY TRACE' NORMAL COMPLETION
Another example is when some users and database administrators try to access the DB2
object, SAPR3.USR02, by using such tools as SPUFI, the DB2 Control Center, and
transaction SU01, within the SAP system. Example 8-11 through Example 8-14 show the
audit records of all activity that was assigned to the DB2 object, USR02.
Example 8-11 shows the audit record for all users that read data in the DB2 object
SAPR3.USR02 in SAP.
Example 8-11 Reading access to DB2 object SAPR3.USR02 within SAP
SAPINST T73DIA00 DRDA 19:26:59.04 BIND PACKAGE: DB0T.SAP0907U.SYSL
SAPINST 4 110801211120 TYPE: SEL-QUERY
DISTSERV SERVER TEXT: SELECT * FROM "USR02"
REQLOC :::172.30.9.120 ACCESS CTRL SCHEMA: N/P
ENDUSER :HAGELSTROMM ACCESS CTRL OBJECT: N/P
WSNAME :'BLANK'
TRANSACT:'BLANK'
Example 8-12 shows the audit record for all users with write access to DB2 object
SAPR3.USR02 in SAP.
Example 8-12 Writing access to DB2 object SAPR3.USR02 within SAP
SAPINST T73DIA00 DRDA 19:26:59.83 BIND PACKAGE: DB0T.SAP0907U.SYSL
SAPINST 4 110801211120 TYPE: INSERT
DISTSERV SERVER TEXT: INSERT INTO "USR02" V
? , ? , ? , ? , ? , ?
? , ? , ? , ? , ? , ?
? , ? , ? , ? , ? , ?
REQLOC :::172.30.9.120 DATABASE: 10041
ENDUSER :HAGELSTROMM ACCESS CTRL SCHEMA: N/P
WSNAME :'BLANK' ACCESS CTRL OBJECT: N/P
TRANSACT:'BLANK'
Chapter 8. Security enhancements of DB2 10 for SAP solutions 123