OA61897: INCORRECT NON-COMPLIANT FINDINGS FOR ZUSS0031 DUE TO INCONSISTENT RACF_PROFILE REPORTING

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Incorrect non-compliant findings for ZUSS0031 due to
  inconsistent RACF_PROFILE reporting.
  

Local fix

• Add SUPPRESS VSAM_SHORTCUT to SE.3 (SETUP PREAMBLE)
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Audit evaluating the STIG   *
  *                 compliance rule set ZUSS0031.                *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Audit STIG compliance rule set  *
  *                      ZUSS0031 might generate incorrect       *
  *                      non-compliant results.                  *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  zSecure Audit STIG compliance rule set ZUSS0031 (z/OS UNIX MVS
  data sets and HFS objects must be protected in accordance with
  security requirements) might generate incorrect non-compliant
  results due inconsistent evaluation of RACF profiles covering
  some UNIX related resources.
  

Problem conclusion

• zSecure Audit has been modified so that STIG compliance rule set
  ZUSS0031 reports resource compliancy correctly.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ06402

Modules/Macros

• CKAGZU31
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R240 PSY UJ06402

     UP21/09/01 P F108

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.