IBM Support

OA65952: Incorrect reporting for RACF-VT-000010

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Incorrect reporting for RACF-VT-000010.
    
    For example, VTAMLST is not included in the control.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit exploiting the RACF   *
    *                 STIG control RACF-VT-000010.                 *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Audit RACF STIG compliance      *
    *                      control RACF-VT-000010 (IBM z/OS system *
    *                      data sets used to support the VTAM      *
    *                      network must be properly secured) might *
    *                      deliver incomplete results.             *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    The RACF STIG control RACF-VT-000010 (IBM z/OS system data sets
    used to support the VTAM network must be properly secured)
    provided by zSecure Audit does not include the VTAMlst (VTAMLST
    data set with VTAM resource definitions) sensitivity type in its
    domain selection criteria resulting in an incomplete compliance
    report.
    

Problem conclusion

  • zSecure Audit has been modified, so that the RACF STIG control
    RACF-VT-000010 delivers proper results.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA65952

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    250

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2023-12-21

  • Closed date

    2024-01-22

  • Last modified date

    2024-02-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    OA66027 UJ94487 UJ94488

Modules/Macros

  • CKAHVT10
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ94488

       UP24/01/25 P F401

  • R310 PSY UJ94487

       UP24/01/25 P F401

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
01 February 2024