Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.
An XCCDF Rule
Description
<VulnDiscussion>Unrestricted control over the issuing of system commands by a Logical Partition could result in unauthorized data access and inadvertent updates. This could result in severe damage to system resources.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-256864r958472_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Review the Security Definition parameters specified under PR/SM, and turn off the Cross Partition Control option.