Batch ACID(s) submitted through RJE and NJE is (are) not sourced.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-231	TSS0830	SV-231r2_rule	DCCS-1 DCCS-2	Medium

Description
Jobs submitted through the RJE or NJE process will be sourced for submission to restrict the ACID so it can only be used from a specific remote number. This ensures that integrity is maintained. Without source restrictions, there is the potential job streams could be submitted from unauthorized locations.

STIG	Date
z/OS TSS STIG	2019-12-12

Details

Check Text ( C-18020r1_chk )

a) Refer to the following report produced by the TSS Data Collection: - TSSCMDS.RPT(@ACIDS) Refer to the list of NJE/RJE batch jobs and each of the associated userids. b) Refer to data obtained from the site installation identifying batch type ACIDs. Ensure that all static batch ACIDs (ACIDs whose passwords never change) originating from a physical reader, RJE, or NJE are sourced to those readers such as (INTRDR, N12.IR, etc) with the appropriate source Syntax. c) If (b) above is complete, there is NO FINDING. d) If (b) above is incomplete, this is a FINDING.

Fix Text (F-18162r1_fix)
Ensure that all static batch ACIDs (ACIDs whose passwords never change) originating from a physical reader, RJE, or NJE are sourced to those readers such as (INTRDR, N12.IR, etc) with the appropriate source Syntax. Example: TSS ADD(batch-acid) SOURCE(device) Develop a plan of action and implement the changes as specified