|Finding ID||Version||Rule ID||IA Controls||Severity|
|Access to product resources should be restricted to only those individuals responsible for the application connectivity and who have a requirement to access these resources. Improper control of product resources could potentially compromise the operating system, ACP, and customer data.|
|z/OS IBM Health Checker for RACF STIG||2015-01-15|
|Check Text ( C-41173r1_chk )|
| Refer to the following report produced by the RACF Data Collection: |
Refer to the following report produced by the RACF Data Collection:
If the IBM Health Checker started task(s) is (are) defined to the STARTED resource class profile and/or ICHRIN03 table entry, this is not a finding.
|Fix Text (F-36721r1_fix)|
| The IAO working with the systems programmer will ensure the IBM Health Checker Started Task(s) is properly identified and/or defined to the System ACP. |
A unique userid must be assigned for the IBM Health Checker started task(s) thru a corresponding STARTED class entry.
The following commands are provided as a sample for defining Started Task(s):
rdef started HZSPROC.** uacc(none) owner(admin) audit(all(read)) –
setr racl(started) ref