UCF STIG Viewer Logo

IBM z/OS LNKAUTH=APFTAB must be specified in the IEASYSxx member(s) in the currently active parmlib data set(s).


Overview

Finding ID Version Rule ID IA Controls Severity
V-223786 RACF-OS-000300 SV-223786r604139_rule Medium
Description
Failure to specify LINKAUTH=APFTAB allows libraries other than those designated as APF to contain authorized modules which could bypass security and violate the integrity of the operating system environment. This expanded authorization list inhibits the ability to control inclusion of these modules.
STIG Date
IBM z/OS RACF Security Technical Implementation Guide 2022-12-14

Details

Check Text ( C-25459r515046_chk )
Refer to IEASYS00 member in SYS1.PARMLIB Concatenation.

If LNKAUTH=APFTAB is not specified, this is a finding.
Fix Text (F-25447r515047_fix)
Configure LNKAUTH=APFTAB in the IEASYS00 member of PARMLIB.