Ensure that the assignment of the UNIX uid(0) is justified

높음레벨 1수동 검토ibm-z

설명

RACF user IDs, groups, and started tasks that use z/OS UNIX facilities are defined to RACF with attributes including UID and GID. If these attributes are not correctly defined, data access or command privilege controls could be compromised.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Request reports generated using IRRDBU00 output that will allow you to: Verify That user IDs assigned UID(0) in their OMVS segment is justified.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To modify the UID vlaue use the RACF ALTUSER command: ALTUSER <user-id> OMVS(UID(<number>))

속성

운영 체제: 모두
태그: ibm-zaccounts
참고 자료: CIS IBM z/OS with RACF Benchmark v1.0.0 - 2.4.4 Ensure that the assignment of the UNIX uid(0) is justified