CA-1 Tape Management STC data sets must be properly protected.
An XCCDF Rule
Description
<VulnDiscussion>CA-1 Tape Management STC data sets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to these data sets could result in violating the integrity of the base product which could result in compromising the operating system or sensitive data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-224451r870225_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Ensure that WRITE and/or greater access to CA1 Tape management STC data sets is limited to systems programmers and/or CA1 Tape management STC(s) and/or batch user(s) only. READ access can be given to auditors.
(Note: The data sets and/or data set prefixes identified below are examples of a possible installation. The actual data sets and/or prefixes are determined when the product is actually installed on a system through the product's installation guide and can be site specific.)
Data sets to be protected will be:
CA1.TMS* (Data sets that are altered by the product's STCs, this can be more specific.)