IBM RACF must define UACC of NONE on all profiles.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-223777 | RACF-OS-000210 | SV-223777r958808_rule | High |
| Description |
|---|
| The operating system must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs. |
| STIG | Date |
|---|---|
| IBM z/OS RACF Security Technical Implementation Guide | 2024-06-24 |
Details
| Check Text ( C-25450r515019_chk ) |
|---|
| Review all Dataset and resource profiles in the RACF database. If any are not defined with UACC NONE, this is a finding. |
| Fix Text (F-25438r515020_fix) |
|---|
| Define each dataset and resource profile with UACC(NONE) |