{"resources":{"db2":{"id":"db2","name":"db2","fields":{"auditPolicy":{"name":"auditPolicy","type":"\u001bdb2.auditPolicy","title":"IBM Db2 audit policy","desc":"An audit policy and which event categories it records, from SYSCAT.AUDITPOLICIES. Each category status is \"N\" (none), \"S\" (success), \"F\" (failure), or \"B\" (both). A policy is only in effect once attached to the database or an object with AUDIT USING. The name field selects the policy, for example db2.instance.auditPolicies.where(name == \"SECMAINTPOLICY\").","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"authority":{"name":"authority","type":"\u001bdb2.authority","title":"IBM Db2 database authority","desc":"The database-level authorities held by one grantee, from SYSCAT.DBAUTH. Each row is a user, group, or role and the flags record which authorities it holds (DBADM, SECADM, DATAACCESS, ACCESSCTRL, and the lower-level CONNECT, CREATETAB, BINDADD, LOAD, and similar). Excessive authorities and authorities granted to PUBLIC are the core CIS checks, for example db2.instance.authorities.where(dbadm \u0026\u0026 granteeType == \"USER\") or db2.instance.authorities.where(grantee == \"PUBLIC\").","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"configParameter":{"name":"configParameter","type":"\u001bdb2.configParameter","title":"IBM Db2 configuration parameter","desc":"A single configuration parameter and its value, from either the database-manager configuration (scope \"dbm\") or the database configuration (scope \"database\"). Security-relevant parameters (for example authentication, sysadm_group, srvcon_auth, ssl_svcename) are audited by selecting the parameter by name, for example db2.instance.dbmConfig.where(name == \"authentication\"). Read from SYSIBMADM.DBMCFG and SYSIBMADM.DBCFG.","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"instance":{"name":"instance","type":"\u001bdb2.instance","title":"IBM Db2 database","desc":"The connected database and its Db2 instance: the service level (version), instance and host names, and the database name, plus the database-manager and database configuration parameters, the authorities and roles that grant access, and the audit policies reached from here. Populated from the SYSCAT catalog and SYSIBMADM administrative views; data the connecting user is not permitted to read is left empty rather than failing.","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"registryVariable":{"name":"registryVariable","type":"\u001bdb2.registryVariable","title":"IBM Db2 registry variable","desc":"A Db2 registry (profile) variable and its value, the SQL equivalent of `db2set -all`. Only variables that are actually set are listed, so a check for a variable that must not be enabled selects it and asserts the value, for example db2.instance.registryVariables.where(name == \"DB2RSHCMD\").all(value == \"ssh\"). Read from SYSIBMADM.REG_VARIABLES.","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"role":{"name":"role","type":"\u001bdb2.role","title":"IBM Db2 role","desc":"A database role and the users, groups, and roles it is granted to. The name field selects the role, for example db2.instance.roles.where(name == \"DBADMROLE\"). Read from SYSCAT.ROLES, with members read from SYSCAT.ROLEAUTH.","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"routinePrivilege":{"name":"routinePrivilege","type":"\u001bdb2.routinePrivilege","title":"IBM Db2 routine privilege","desc":"The EXECUTE privilege one grantee holds on one routine, from SYSCAT.ROUTINEAUTH. The benchmark requires that PUBLIC cannot execute the authorization-introspection routines in SYSPROC, for example db2.instance.routinePrivileges.where(grantee == \"PUBLIC\" \u0026\u0026 specificName == \"AUTH_LIST_ROLES_FOR_AUTHID\").all(execute == false).","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"table":{"name":"table","type":"\u001bdb2.table","title":"IBM Db2 table","desc":"A table or view and the table space that holds it, from SYSCAT.TABLES. Used to find user objects that were created in a system table space, for example db2.instance.tables.where(tablespace == \"SYSTOOLSPACE\").","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"tablePrivilege":{"name":"tablePrivilege","type":"\u001bdb2.tablePrivilege","title":"IBM Db2 table privilege","desc":"The privileges one grantee holds on one table or view, from SYSCAT.TABAUTH. Restricting the catalog is the core CIS check: the benchmark requires that PUBLIC hold no SELECT privilege on the SYSCAT, SYSIBM, and SYSIBMADM views, for example db2.instance.tablePrivileges.where(grantee == \"PUBLIC\" \u0026\u0026 schema == \"SYSCAT\" \u0026\u0026 table == \"DBAUTH\").all(select == false).","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true},"tablespacePrivilege":{"name":"tablespacePrivilege","type":"\u001bdb2.tablespacePrivilege","title":"IBM Db2 table space privilege","desc":"The USE privilege one grantee holds on one table space, from SYSCAT.TBSPACEAUTH. Granting USE to PUBLIC lets any user create objects in the table space, for example db2.instance.tablespacePrivileges.where(grantee == \"PUBLIC\").","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2","is_implicit_resource":true}},"title":"IBM Db2","desc":"Root of the IBM Db2 provider. The connected database and everything queryable through it (configuration parameters, authorities, roles, and audit policies) is reached from db2.instance.","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.auditPolicy":{"id":"db2.auditPolicy","name":"db2.auditPolicy","fields":{"auditStatus":{"name":"auditStatus","type":"\u0007","is_mandatory":true,"title":"Status for the AUDIT category (audit-setting changes)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"checkingStatus":{"name":"checkingStatus","type":"\u0007","is_mandatory":true,"title":"Status for the CHECKING category (authorization checking during access)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"contextStatus":{"name":"contextStatus","type":"\u0007","is_mandatory":true,"title":"Status for the CONTEXT category (operation context records)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"errorType":{"name":"errorType","type":"\u0007","is_mandatory":true,"title":"Which errors are audited: \"N\" (normal) or \"A\" (all, including audit failures)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"executeStatus":{"name":"executeStatus","type":"\u0007","is_mandatory":true,"title":"Status for the EXECUTE category (statement execution)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Audit policy name","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"objMaintStatus":{"name":"objMaintStatus","type":"\u0007","is_mandatory":true,"title":"Status for the OBJMAINT category (data object create and drop)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"secMaintStatus":{"name":"secMaintStatus","type":"\u0007","is_mandatory":true,"title":"Status for the SECMAINT category (grant and revoke of privileges)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"sysAdminStatus":{"name":"sysAdminStatus","type":"\u0007","is_mandatory":true,"title":"Status for the SYSADMIN category (operations by an administrative authority)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"validateStatus":{"name":"validateStatus","type":"\u0007","is_mandatory":true,"title":"Status for the VALIDATE category (authentication and user lookup)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 audit policy","desc":"An audit policy and which event categories it records, from SYSCAT.AUDITPOLICIES. Each category status is \"N\" (none), \"S\" (success), \"F\" (failure), or \"B\" (both). A policy is only in effect once attached to the database or an object with AUDIT USING. The name field selects the policy, for example db2.instance.auditPolicies.where(name == \"SECMAINTPOLICY\").","defaults":"name","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.authority":{"id":"db2.authority","name":"db2.authority","fields":{"accessctrl":{"name":"accessctrl","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds ACCESSCTRL (grant and revoke privileges) authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"bindadd":{"name":"bindadd","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds BINDADD (create packages) authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"connect":{"name":"connect","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds CONNECT authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"createtab":{"name":"createtab","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds CREATETAB (create tables) authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"dataaccess":{"name":"dataaccess","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds DATAACCESS (access to all data) authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"dbadm":{"name":"dbadm","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds DBADM (database administration) authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"externalRoutine":{"name":"externalRoutine","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds CREATE_EXTERNAL_ROUTINE authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"grantee":{"name":"grantee","type":"\u0007","is_mandatory":true,"title":"Name of the user, group, or role holding the authorities","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"granteeType":{"name":"granteeType","type":"\u0007","is_mandatory":true,"title":"Grantee type: \"USER\", \"GROUP\", or \"ROLE\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"implicitSchema":{"name":"implicitSchema","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds IMPLICIT_SCHEMA (create implicit schemas) authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"libraryadm":{"name":"libraryadm","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds LIBRARYADM authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"load":{"name":"load","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds LOAD authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"quiesceConnect":{"name":"quiesceConnect","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds QUIESCE_CONNECT authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"securityadm":{"name":"securityadm","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds SECADM (security administration) authority","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 database authority","desc":"The database-level authorities held by one grantee, from SYSCAT.DBAUTH. Each row is a user, group, or role and the flags record which authorities it holds (DBADM, SECADM, DATAACCESS, ACCESSCTRL, and the lower-level CONNECT, CREATETAB, BINDADD, LOAD, and similar). Excessive authorities and authorities granted to PUBLIC are the core CIS checks, for example db2.instance.authorities.where(dbadm \u0026\u0026 granteeType == \"USER\") or db2.instance.authorities.where(grantee == \"PUBLIC\").","defaults":"grantee granteeType","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.configParameter":{"id":"db2.configParameter","name":"db2.configParameter","fields":{"deferredValue":{"name":"deferredValue","type":"\u0007","is_mandatory":true,"title":"Pending value that takes effect after the next restart, when different","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"deferredValueFlags":{"name":"deferredValueFlags","type":"\u0007","is_mandatory":true,"title":"Value flags that apply to the pending value","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Parameter name, for example \"authentication\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Configuration scope: \"dbm\" (database manager) or \"database\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Current running value of the parameter","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"valueFlags":{"name":"valueFlags","type":"\u0007","is_mandatory":true,"title":"Whether Db2 manages the current value itself, for example \"AUTOMATIC\" or \"NONE\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 configuration parameter","desc":"A single configuration parameter and its value, from either the database-manager configuration (scope \"dbm\") or the database configuration (scope \"database\"). Security-relevant parameters (for example authentication, sysadm_group, srvcon_auth, ssl_svcename) are audited by selecting the parameter by name, for example db2.instance.dbmConfig.where(name == \"authentication\"). Read from SYSIBMADM.DBMCFG and SYSIBMADM.DBCFG.","defaults":"name value","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.instance":{"id":"db2.instance","name":"db2.instance","fields":{"auditPolicies":{"name":"auditPolicies","type":"\u0019\u001bdb2.auditPolicy","title":"Audit policies defined in the database","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"authorities":{"name":"authorities","type":"\u0019\u001bdb2.authority","title":"Database authorities granted to users, groups, and roles","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"databaseName":{"name":"databaseName","type":"\u0007","is_mandatory":true,"title":"Name of the connected database","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"dbConfig":{"name":"dbConfig","type":"\u0019\u001bdb2.configParameter","title":"Database-level configuration parameters","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"dbmConfig":{"name":"dbmConfig","type":"\u0019\u001bdb2.configParameter","title":"Database-manager (instance-level) configuration parameters","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"hostName":{"name":"hostName","type":"\u0007","is_mandatory":true,"title":"Host the instance runs on","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"instanceName":{"name":"instanceName","type":"\u0007","is_mandatory":true,"title":"Instance name, for example \"db2inst1\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"registryVariables":{"name":"registryVariables","type":"\u0019\u001bdb2.registryVariable","title":"Db2 registry variables and their values","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"roles":{"name":"roles","type":"\u0019\u001bdb2.role","title":"Roles defined in the database","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"routinePrivileges":{"name":"routinePrivileges","type":"\u0019\u001bdb2.routinePrivilege","title":"Privileges granted on routines (functions, procedures, and methods)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"serviceLevel":{"name":"serviceLevel","type":"\u0007","is_mandatory":true,"title":"Db2 service level, for example \"DB2 v11.5.8.0\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"tablePrivileges":{"name":"tablePrivileges","type":"\u0019\u001bdb2.tablePrivilege","title":"Privileges granted on tables and views","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"tables":{"name":"tables","type":"\u0019\u001bdb2.table","title":"Tables and views defined in the database","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"tablespacePrivileges":{"name":"tablespacePrivileges","type":"\u0019\u001bdb2.tablespacePrivilege","title":"Privileges granted on table spaces","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 database","desc":"The connected database and its Db2 instance: the service level (version), instance and host names, and the database name, plus the database-manager and database configuration parameters, the authorities and roles that grant access, and the audit policies reached from here. Populated from the SYSCAT catalog and SYSIBMADM administrative views; data the connecting user is not permitted to read is left empty rather than failing.","defaults":"databaseName serviceLevel","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.registryVariable":{"id":"db2.registryVariable","name":"db2.registryVariable","fields":{"aggregateName":{"name":"aggregateName","type":"\u0007","is_mandatory":true,"title":"Name of the aggregate registry variable that sets this one, when any","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"level":{"name":"level","type":"\u0007","is_mandatory":true,"title":"Registry level the value comes from: \"I\", \"G\", \"N\", or \"E\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Registry variable name, for example \"DB2COMM\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Value the Db2 instance uses","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 registry variable","desc":"A Db2 registry (profile) variable and its value, the SQL equivalent of `db2set -all`. Only variables that are actually set are listed, so a check for a variable that must not be enabled selects it and asserts the value, for example db2.instance.registryVariables.where(name == \"DB2RSHCMD\").all(value == \"ssh\"). Read from SYSIBMADM.REG_VARIABLES.","defaults":"name value","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.role":{"id":"db2.role","name":"db2.role","fields":{"grantees":{"name":"grantees","type":"\u0019\u0007","title":"Names of the users, groups, and roles this role is granted to","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Numeric role identifier","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 role","desc":"A database role and the users, groups, and roles it is granted to. The name field selects the role, for example db2.instance.roles.where(name == \"DBADMROLE\"). Read from SYSCAT.ROLES, with members read from SYSCAT.ROLEAUTH.","defaults":"name","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.routinePrivilege":{"id":"db2.routinePrivilege","name":"db2.routinePrivilege","fields":{"execute":{"name":"execute","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds EXECUTE privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"grantee":{"name":"grantee","type":"\u0007","is_mandatory":true,"title":"Name of the user, group, or role holding the privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"granteeType":{"name":"granteeType","type":"\u0007","is_mandatory":true,"title":"Grantee type: \"USER\", \"GROUP\", or \"ROLE\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"routineType":{"name":"routineType","type":"\u0007","is_mandatory":true,"title":"Routine type: \"F\" (function), \"M\" (method), or \"P\" (procedure)","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the routine belongs to, for example \"SYSPROC\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"specificName":{"name":"specificName","type":"\u0007","is_mandatory":true,"title":"Specific name of the routine, empty when the grant covers the whole schema","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 routine privilege","desc":"The EXECUTE privilege one grantee holds on one routine, from SYSCAT.ROUTINEAUTH. The benchmark requires that PUBLIC cannot execute the authorization-introspection routines in SYSPROC, for example db2.instance.routinePrivileges.where(grantee == \"PUBLIC\" \u0026\u0026 specificName == \"AUTH_LIST_ROLES_FOR_AUTHID\").all(execute == false).","defaults":"grantee schema specificName","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.table":{"id":"db2.table","name":"db2.table","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Table or view name","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"owner":{"name":"owner","type":"\u0007","is_mandatory":true,"title":"Authorization ID that owns the object","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the table or view belongs to","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"tablespace":{"name":"tablespace","type":"\u0007","is_mandatory":true,"title":"Table space that holds the object, empty for objects without one","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Object type: \"T\" (table), \"V\" (view), \"A\" (alias), \"N\" (nickname), and so on","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 table","desc":"A table or view and the table space that holds it, from SYSCAT.TABLES. Used to find user objects that were created in a system table space, for example db2.instance.tables.where(tablespace == \"SYSTOOLSPACE\").","defaults":"schema name","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.tablePrivilege":{"id":"db2.tablePrivilege","name":"db2.tablePrivilege","fields":{"alter":{"name":"alter","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds ALTER privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"control":{"name":"control","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds CONTROL privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"delete":{"name":"delete","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds DELETE privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"grantee":{"name":"grantee","type":"\u0007","is_mandatory":true,"title":"Name of the user, group, or role holding the privileges","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"granteeType":{"name":"granteeType","type":"\u0007","is_mandatory":true,"title":"Grantee type: \"USER\", \"GROUP\", or \"ROLE\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"index":{"name":"index","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds INDEX privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"insert":{"name":"insert","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds INSERT privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"references":{"name":"references","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds REFERENCES privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the table or view belongs to, for example \"SYSCAT\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"select":{"name":"select","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds SELECT privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"table":{"name":"table","type":"\u0007","is_mandatory":true,"title":"Table or view name, for example \"DBAUTH\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"update":{"name":"update","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds UPDATE privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 table privilege","desc":"The privileges one grantee holds on one table or view, from SYSCAT.TABAUTH. Restricting the catalog is the core CIS check: the benchmark requires that PUBLIC hold no SELECT privilege on the SYSCAT, SYSIBM, and SYSIBMADM views, for example db2.instance.tablePrivileges.where(grantee == \"PUBLIC\" \u0026\u0026 schema == \"SYSCAT\" \u0026\u0026 table == \"DBAUTH\").all(select == false).","defaults":"grantee schema table","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"db2.tablespacePrivilege":{"id":"db2.tablespacePrivilege","name":"db2.tablespacePrivilege","fields":{"grantee":{"name":"grantee","type":"\u0007","is_mandatory":true,"title":"Name of the user, group, or role holding the privilege","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"granteeType":{"name":"granteeType","type":"\u0007","is_mandatory":true,"title":"Grantee type: \"USER\", \"GROUP\", or \"ROLE\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"tablespace":{"name":"tablespace","type":"\u0007","is_mandatory":true,"title":"Table space name, for example \"USERSPACE1\"","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"},"use":{"name":"use","type":"\u0004","is_mandatory":true,"title":"Whether the grantee holds USE privilege on the table space","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}},"title":"IBM Db2 table space privilege","desc":"The USE privilege one grantee holds on one table space, from SYSCAT.TBSPACEAUTH. Granting USE to PUBLIC lets any user create objects in the table space, for example db2.instance.tablespacePrivileges.where(grantee == \"PUBLIC\").","defaults":"grantee tablespace","provider":"go.mondoo.com/mql-enterprise-providers/providers/db2"}}}