Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.
An XCCDF Rule
Description
Unrestricted control over the issuing of system commands by a Logical Partition could result in unauthorized data access and inadvertent updates. This could result in severe damage to system resources.
- ID
- SV-256864r958472_rule
- Version
- HLP0030
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Review the Security Definition parameters specified under PR/SM, and turn off the Cross Partition Control option.