Ensure that the assignment of the UNIX uid(0) is justified

ВисокаНиво 1Ручни прегледibm-z

Опис

RACF user IDs, groups, and started tasks that use z/OS UNIX facilities are defined to RACF with attributes including UID and GID. If these attributes are not correctly defined, data access or command privilege controls could be compromised.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Request reports generated using IRRDBU00 output that will allow you to: Verify That user IDs assigned UID(0) in their OMVS segment is justified.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

To modify the UID vlaue use the RACF ALTUSER command: ALTUSER <user-id> OMVS(UID(<number>))

Својства

Оперативни системи: Било који
Ознаке: ibm-zaccounts
Референца: CIS IBM z/OS with RACF Benchmark v1.0.0 - 2.4.4 Ensure that the assignment of the UNIX uid(0) is justified