OA66925: SITE_SEVERITY SPECIFICATION WITH CONTROL BUT WITHOUT RULE DOES NOT CAUSE THE EXPECTED CHANGE IN AUDITPRIORITY

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• SITE_SEVERITY specification with CONTROL but without RULE does
  not cause the expected change in AUDITPRIORITY.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Audit exploiting custom     *
  *                 site-specific severities by using            *
  *                 SITE_SEVERITY CARLa statements for controls  *
  *                 or rule sets that are part of  supported     *
  *                 standards.                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Audit ignores the <severity>    *
  *                      value specified in a SITE_SEVERITY      *
  *                      CARLa statement without a RULE[_SET]    *
  *                      specification causing an incorrect      *
  *                      audit  priority to be reported for the  *
  *                      involved control.                       *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided and review the        *
  *                 documentation updates.                       *
  ****************************************************************
  When a SITE_SEVERITY CARLa statement does not contain a
  RULE[_SET] specification, zSecure Audit ignores the specified
  <severity>  value in the SITE_SEVERITY statement causing an
  incorrect audit priority to be reported for a control that is
  part of a supported standard.
  

Problem conclusion

• zSecure Audit has been modified, so that the program accounts
  for the <severity> value as specified in a SITE_SEVERITY CARLa
  statement without RULE[_SET] specification.
  Please note the documentation changes as provided by the APAR
  tracking comment data.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ95935

Modules/Macros

• CKAINCMP CKRINPZ  GKRINCMP GKRINPZ
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R310 PSY UJ95935

     UP24/09/14 P F409

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.