Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
TRACE attribute has been found assigned to ACIDs.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-244 | TSS0970 | SV-244r2_rule | DCCS-1 DCCS-2 | Medium |
| Description |
|---|
| The TRACE attribute allows ACIDs to diagnose the security trace information. This information goes to the SYSLOG dataset. This could give an ACID the ability to access system control information. |
| STIG | Date |
|---|---|
| z/OS TSS STIG | 2017-06-26 |
Details
| Check Text ( C-580r1_chk ) |
|---|
| Refer to the following report produced by the TSS Data Collection: - TSSPRIV.RPT Automated Analysis Refer to the following report produced by the TSS Data Collection: - PDI(TSS0970) Review ACIDs having the TRACE attribute. TRACE should not be assigned. Note: The IAO will ensure that the trace attribute is only used for trouble shooting purposes. |
| Fix Text (F-18404r1_fix) |
|---|
| Review all ACIDs with the TRACE attribute. Evaluate the impact of correcting the deficiency. Develop a plan of action and remove the TRACE attribute. Example: TSS REMOVE(acid) TRACE. |