IBM i
TMA-IBM-I-6.1
QSECOFR Profile Shall Be *DISABLED
KritikDüzey 1Manuel incelemeibm-i
Açıklama
The QSECOFR profile shall be *DISABLED to prevent interactive use. You can always sign on with the QSECOFR profile at the console, even if the status of QSECOFR is *DISABLED. QSECOFR is the most powerful profile on the IBM i and is equivalent to the UNIX Root Profile. Additionally, you should prevent QSECOFR from interactively signing on by *DISABLING it and create unique security officer profiles as required by the business.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
DSPUSRPRF USRPRF(QSECOFR) Observe the Status to ensure that it is *DISABLED
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
CHGUSRPRF USRPRF(QSECOFR) STATUS(*DISABLED)
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- ibm-iaccounts
- Referans
- CIS IBM i V7R5M0 Benchmark v2.1.0 - 6.1 QSECOFR Profile Shall Be *DISABLED