TMAegisBeta
ibm-z için daha fazla kural

IBM Z (z/OS)

TMA-IBM-Z-2.4.4

Ensure that the assignment of the UNIX uid(0) is justified

YüksekDüzey 1Manuel incelemeibm-z

Açıklama

RACF user IDs, groups, and started tasks that use z/OS UNIX facilities are defined to RACF with attributes including UID and GID. If these attributes are not correctly defined, data access or command privilege controls could be compromised.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Request reports generated using IRRDBU00 output that will allow you to: Verify That user IDs assigned UID(0) in their OMVS segment is justified.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To modify the UID vlaue use the RACF ALTUSER command: ALTUSER <user-id> OMVS(UID(<number>))

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
ibm-zaccounts
Referans
CIS IBM z/OS with RACF Benchmark v1.0.0 - 2.4.4 Ensure that the assignment of the UNIX uid(0) is justified