Skip to content

IBM z/OS LNKAUTH=APFTAB must be specified in the IEASYSxx member(s) in the currently active parmlib data set(s).

An XCCDF Rule

Description

Failure to specify LINKAUTH=APFTAB allows libraries other than those designated as APF to contain authorized modules which could bypass security and violate the integrity of the operating system environment. This expanded authorization list inhibits the ability to control inclusion of these modules.

ID
SV-223786r958478_rule
Version
RACF-OS-000300
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure LNKAUTH=APFTAB in the IEASYS00 member of PARMLIB.