OA65541: INCORRECT NON-COMPLIANT FINDINGS FOR RACF-ES-000540 WHEN CONTROL ACCESS IS IN EFFECT.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Incorrect non-compliant findings for RACF-ES-000540 when CONTROL
  access is in effect.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Audit exploiting the RACF   *
  *                 STIG compliance control RACF-ES-000540.      *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Audit RACF STIG compliance      *
  *                      control RACF-ES-000540 might report     *
  *                      incorrect non-compliant results.        *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  The RACF STIG compliance control RACF-ES-000540 (IBM z/OS must
  limit access for SMF collection files (i.e., SYS1.MANx) to
  appropriate users and  batch jobs that perform SMF dump
  processing) might report incorrect non-compliant results as the
  access check level performed by the control incorrectly
  restricted UPDATE and higher access to z/OS systems
  programming personnel only.
  

Problem conclusion

• zSecure Audit has been modified, so that the RACF STIG
  compliance control RACF-ES-000540 delivers proper results as
  access  check levels now restricts UPDATE and higher access to
  z/OS systems programming personnel, and/or batch jobs that
  perform  SMF dump processing and others approved by ISSM.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ94068 UJ94069

Modules/Macros

• CKAHE540
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R250 PSY UJ94069

     UP23/11/10 P F311

• R310 PSY UJ94068

     UP23/11/10 P F311

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.