Ensure that the assignment of the UNIX uid(0) is justified

VisokaNivo 1Ručni pregledibm-z

Opis

RACF user IDs, groups, and started tasks that use z/OS UNIX facilities are defined to RACF with attributes including UID and GID. If these attributes are not correctly defined, data access or command privilege controls could be compromised.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Request reports generated using IRRDBU00 output that will allow you to: Verify That user IDs assigned UID(0) in their OMVS segment is justified.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

To modify the UID vlaue use the RACF ALTUSER command: ALTUSER <user-id> OMVS(UID(<number>))

Svojstva

Operativni sistemi: Bilo koji
Oznake: ibm-zaccounts
Referenca: CIS IBM z/OS with RACF Benchmark v1.0.0 - 2.4.4 Ensure that the assignment of the UNIX uid(0) is justified