TMA-IBM-Z-2.2.3
Ensure that PASSWORD protection for data sets is not used
TinggiLevel 1Tinjauan manualibm-z
Deskripsi
All protection of system resources must come from RACF. If multiple protection mechanisms are in place, the accessibility of data, specifically under contingency plan execution, is subject to compromise.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Interview question to check if system PASSWORD data set and OS passwords are being used.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Migrate from PASSWORD protection for data sets to RACF profiles in the DATASET class.
Properti
- Sistem operasi
- Apa saja
- Tag
- ibm-zpassword-policy
- Referensi
- CIS IBM z/OS with RACF Benchmark v1.0.0 - 2.2.3 Ensure that PASSWORD protection for data sets is not used