IBM Support

OA58879: STIG ACF0350 NOT REPORTING CORRECTLY

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • STIG ACF0350 not reporting correctly
    

Local fix

  • Not Applicable
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit using the ACF2 STIG   *
    *                 compliance rule ACF0350.                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: The zSecure Audit STIG compliance rule  *
    *                      ACF0350 (The MAINT GSO record value, if *
    *                      specified, will be restricted to        *
    *                      production storage management user      *
    *                      accounts and programs) might report     *
    *                      false non-compliant logonids.           *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided and review the        *
    *                 documentation updates.                       *
    ****************************************************************
    zSecure Audit processes GSO record selection incorrectly so that
    ACF2 STIG compliance rule ACF0350 might report false
    non-compliant logonids.
    

Problem conclusion

  • zSecure Audit for ACF2 has been modified so that STIG compliance
    rule ACF0350 delivers correct results. Please note the
    documentation changes as provided by the APAR tracking comment
    data.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA58879

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    231

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-01-07

  • Closed date

    2020-04-17

  • Last modified date

    2020-05-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    OA59412 UJ02670 UJ02671

Modules/Macros

  • CKRINP@  GKRINP@
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R231 PSY UJ02670

       UP20/04/18 P F004

  • R240 PSY UJ02671

       UP20/04/18 P F004

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSCE68R","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}]}]

Document Information

Modified date:
04 May 2020