IBM RACF must define WARN = NO on all profiles.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-98113 | RACF-ES-000560 | SV-107217r1_rule | High |
| Description |
|---|
| Failure to restrict system access to authenticated users negatively impacts operating system security. |
| STIG | Date |
|---|---|
| IBM z/OS RACF Security Technical Implementation Guide | 2020-06-29 |
Details
| Check Text ( C-96949r1_chk ) |
|---|
| Review all Dataset and resource profiles in the RACF database. If any are not defined with WARN = NO, this is a finding. |
| Fix Text (F-103789r1_fix) |
|---|
| Define each dataset and resource profile with WARN = NO |