IBM Support

Guardium enhancements for tracking Change Profile

News


Abstract

Guardium Database Activity Monitor and Db2 for i has improved to provide more detail for CP (Change Profile) Audit Journal entries.

Content

You are in: IBM i Technology Updates > Db2 for i - Technology Updates > Db2 for i Security Enhancements > Guardium enhancements for tracking Change Profile

The format of the Bind Variable Values detail for CP entries:
CHANGE TYPE: <user-action>

       NEW: SPCAUT( <special authority values> ) 

       OLD: SPCAUT( <special authority values> )
user-action - The interface which caused the CP entry.
Possible values include: CRTUSRPRF, CHGUSRPRF, RSTUSRPRF, QSECOFR password reset using DST, and QSYRESPA API.
special authority values - Special authority values, separated by a single space. 

Possible values include: *ALLOBJ, *JOBCTL, *SAVSYS, *SECADM, *SPLCTL, *SERVICE, *AUDIT, *IOSYSCFG, and *NONE.

Note: Some CP audit journal entries lack any change in special authority.  Entries such as these will contain *NONE for OLD and NEW.

Example output:

image-20200115152214-1

and

image-20200115152224-2

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Component":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB57","label":"Power"}}]

Document Information

Modified date:
21 January 2020

UID

ibm11167124

Page Feedback