OA65148: ADD AUDIT CONCERN FOR UPDATE ACCESS TO MASTER CATALOG

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Add audit concern for UPDATE access to master catalog.
  
  Without this, STIG control RACF-ES-000180 does not report
  findings for UPDATE and CONTROL access.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Audit exploiting the        *
  *                 RACF-ES-000180 compliance rule set.          *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Audit compliance rule set       *
  *                      RACF-ES-000180 (IBM RACF access to the  *
  *                      system Master Catalog must be properly  *
  *                      protected) does not report              *
  *                      non-compliant findings.                 *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When RACF profile(s) covering a master catalog has UPDATE
  access, zSecure Audit compliance rule set RACF-ES-000180 (IBM
  RACF access to the system Master Catalog must be properly
  protected)  does not reports non-compliant findings for such
  profile(s).
  

Problem conclusion

• zSecure Audit has been modified, so that the compliance rule set
  RACF-ES-000180 reports non-compliant findings properly in cases
  where RACF profile(s) covering a master catalog has UPDATE
  access.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ93228

Modules/Macros

• CKASEND  GKRSEND
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R250 PSY UJ93228

     UP23/07/20 P F307

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.