OA67636: CIS-OS-7.1.2 CONTROL REPORTS INCORRECT NON-COMPLIANT FINDING WHEN NO OMVS SEGMENT EXISTS FOR ICSF STC USER ID

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• CIS-OS-7.1.2 control reports incorrect non-compliant finding
  when no OMVS segment exists for ICSF STC user ID.
  
  Goal 2.ICSF_STC_no_uid0 does not take into consideration that no
  OMVS segment is required for ICSF.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Audit exploiting the RACF   *
  *                 z/OS CIS 7.1.2 compliance control.           *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Audit's RACF z/OS CIS 7.1.2     *
  *                      compliance control might report         *
  *                      incorrect non-compliant results.        *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  The RACF z/OS CIS 7.1.2 compliance control (Ensure that the ICSF
  Started Task is protected) provided by zSecure Audit reports
  incorrect non-compliant findings in cases where there is no OMVS
  segment defined for the ICSF started task user ID profile.
  

Problem conclusion

• zSecure Audit has been modified, so that the  RACF z/OS CIS
  7.1.2 compliance control provided by zSecure Audit does not
  report incorrect non-compliant findings in cases where there is
  no OMVS segment defined for the ICSF started task user ID
  profile.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ96867

Modules/Macros

• CKAHR712
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R310 PSY UJ96867

     UP25/03/27 P F503

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.