Db2 and Linux security

There are some security considerations specific to Linux® platforms that you might need to be aware of.

Change password support (Linux)
Db2 database products provide support for changing passwords on Linux operating systems.
Deploying a change password plug-in (Linux)
To enable support for changing passwords in the Db2 database products on Linux® or AIX®, you must configure the Db2 instance to use Transparent LDAP.
SELinux
SELinux (Security Enhanced Linux) is code that runs in user-space, taking advantage of kernel code (Linux Security Modules) to provide Mandatory Access Control (MAC) over system resources. Processes are confined to domains, which can be thought of as sandboxes. Access to system objects and capabilities like files, message queues, semaphores, networking is controlled on a per-domain basis following the principle of least privilege.

Parent topic: Working with operating system security