OA59051: ZUSS0023 INCORRECTLY REPORTS A NON-COMPLIANT FINDING FOR CHOWN.UNRESTRICTED WHEN A GENERIC PROFILE COVERING IT EXISTS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• ZUSS0023 incorrectly reports a non-compliant finding for
  CHOWN.UNRESTRICTED when a generic profile covering it exists.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Audit exploiting STIG       *
  *                 compliance rule ZUSS0023.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: The zSecure Audit STIG compliance rule  *
  *                      ZUSS0023 (z/OS UNIX SUPERUSER resources *
  *                      must be protected in accordance with    *
  *                      security requirements) might report     *
  *                      incorrect non-compliant finding.        *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When a generic profile which covers the CHOWN.UNRESTRICTED
  resource exists in the UNIXPRIV class, the zSecure STIG
  compliance rule ZUSS0023 incorrectly reports a non-compliant
  finding.
  

Problem conclusion

• zSecure Audit has been modified so that STIG compliance rule
  ZUSS0023 does not report non-compliant finding in cases where a
  generic profile which covers the CHOWN.UNRESTRICTED resource
  exists in the UNIXPRIV class.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ02344 UJ02345

Modules/Macros

• CKAGZU23 CKASENR  GKRSENR
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R231 PSY UJ02344

     UP20/03/13 P F003

• R240 PSY UJ02345

     UP20/03/13 P F003

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.