How does a user get "Installation SYSADM" in TSS DB2 and will this access be recorded in a Comp Mngr warehouse record?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

How does a user get "Installation SYSADM" in TSS DB2  and will this access be recorded in a Comp Mngr warehouse record?

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

“DB2 Installation SYSADM” and “DB2 Installation SYSOPR” are special authorities that are recognized by CA Top Secret Option for DB2, but are assigned by native DB2 during the installation of DB2.

The Installation SYSADM has all authority to everything so there aren't any security calls made from DB2 if it's under the Installation SYSADM id.

TSSDB2 intercepts all security calls from DB2, but since there isn't a security call if it's the Installation SYSADM, there is nothing for us to intercept.