OA65640: INCORRECT NON-COMPLIANT FINDINGS FOR RACF-ES-000240

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Incorrect non-compliant findings for RACF-ES-000240.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Audit exploiting the        *
  *                 STIG compliance controls RACF-ES-000240 and  *
  *                 RACF-ES-000650.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Audit RACF STIG compliance      *
  *                      controls RACF-ES-000240 and             *
  *                      RACF-ES-000650 might report incorrect   *
  *                      (non-)compliant results.                *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  The RACF STIG compliance controls RACF-ES-000240 (IBM RACF batch
  jobs must be properly secured) and RACF-ES-000650 (IBM z/OS
  Batch job user IDs must be properly defined ) used a general
  customization member PRODAUDT that can include IDs that are not
  relevant for these controls. That implementation caused the
  controls to potentially report incorrect (non-)compliant
  results.
  

Problem conclusion

• zSecure Audit has been modified, so that the RACF STIG
  compliance controls RACF-ES-000240 and RACF-ES-000650 use
  respectively configuration customization members BBJSCHED
  and BATCHIDS to produce proper compliance results.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ94120 UJ94121

Modules/Macros

• BATCHIDS BBJSCHED C2RG@DEF C2RH@DEF CKAHE240 CKAHE650 CKAIRULE
  CKAV0001
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R250 PSY UJ94121

     UP23/11/17 P F311

• R310 PSY UJ94120

     UP23/11/17 P F311

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.