IRRH240E

Explanation
The check-name check has found
one or more non-LPA ICHAUTAB entries. IBM® recommends
that ICHAUTAB contain no entries. An entry in ICHAUTAB represents
a program whose access should be controlled by using PROGRAM CONTROL
and restricted to a known set of trusted users or trusted started
tasks. LPA-resident ICHAUTAB entries are listed in the RACF_SENSITIVE_RESOURCES
check.

System action
The check continues processing. There is no effect
on the system.

Operator response
None.

System programmer response
If the modules in ICHAUTAB are no
longer in use, they should be deleted from ICHAUTAB. If the modules
are still in use and the privileges granted by ICHAUTAB are still
required, the modules should be protected by using PROGRAM CONTROL
and their use should be restricted to a known set of trusted users
or trusted started tasks.

Problem determination

Source

Module
IRRHCR00

Routing code
N/A

Descriptor code
N/A

Automation
None.

Reference Documentation
See IBM Health Checker for z/OS User's Guide and z/OS Security Server RACF Security Administrator's Guide.