A fix is available
APAR status
Closed as program error.
Error description
Add audit concern for UPDATE access to master catalog. Without this, STIG control RACF-ES-000180 does not report findings for UPDATE and CONTROL access.
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure Audit exploiting the * * RACF-ES-000180 compliance rule set. * **************************************************************** * PROBLEM DESCRIPTION: zSecure Audit compliance rule set * * RACF-ES-000180 (IBM RACF access to the * * system Master Catalog must be properly * * protected) does not report * * non-compliant findings. * **************************************************************** * RECOMMENDATION: Apply the PTF provided. * **************************************************************** When RACF profile(s) covering a master catalog has UPDATE access, zSecure Audit compliance rule set RACF-ES-000180 (IBM RACF access to the system Master Catalog must be properly protected) does not reports non-compliant findings for such profile(s).
Problem conclusion
zSecure Audit has been modified, so that the compliance rule set RACF-ES-000180 reports non-compliant findings properly in cases where RACF profile(s) covering a master catalog has UPDATE access.
Temporary fix
Comments
APAR Information
APAR number
OA65148
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
250
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2023-07-05
Closed date
2023-07-17
Last modified date
2023-08-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ93228
Modules/Macros
CKASEND GKRSEND
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
R250 PSY UJ93228
UP23/07/20 P F307
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
01 August 2023