Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-244 | TSS0970 | SV-244r2_rule | DCCS-1 DCCS-2 | Medium |
Description |
---|
The TRACE attribute allows ACIDs to diagnose the security trace information. This information goes to the SYSLOG dataset. This could give an ACID the ability to access system control information. |
STIG | Date |
---|---|
z/OS TSS STIG | 2016-06-30 |
Check Text ( C-580r1_chk ) |
---|
Refer to the following report produced by the TSS Data Collection: - TSSPRIV.RPT Automated Analysis Refer to the following report produced by the TSS Data Collection: - PDI(TSS0970) Review ACIDs having the TRACE attribute. TRACE should not be assigned. Note: The IAO will ensure that the trace attribute is only used for trouble shooting purposes. |
Fix Text (F-18404r1_fix) |
---|
Review all ACIDs with the TRACE attribute. Evaluate the impact of correcting the deficiency. Develop a plan of action and remove the TRACE attribute. Example: TSS REMOVE(acid) TRACE. |