The IBM RACF SERVAUTH resource class must be active for TCP/IP resources.
An XCCDF Rule
Description
IBM Provides the SERVAUTH Class for use in protecting a variety of TCP/IP features/functions/products both IBM and third-party. Failure to activate this class will result in unprotected resources. This exposure may threaten the integrity of the operating system environment, and compromise the confidentiality of customer data.
- ID
- SV-223824r958472_rule
- Version
- RACF-TC-000050
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure RACF SETROPTS to have the SERVAUTH resource class is active.
Evaluate the impact associated with implementation of the control option. Develop a plan of action to implement the control option as specified in the example below:
The RACF Command SETR LIST will show the status of RACF Controls including a list of ACTIVE classes.