Skip to content

IBM z/OS SYS1.PARMLIB must be properly protected.

An XCCDF Rule

Description

Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. Satisfies: SRG-OS-000063-GPOS-00032, SRG-OS-000080-GPOS-00048, SRG-OS-000259-GPOS-00100, SRG-OS-000362-GPOS-00149, SRG-OS-000337-GPOS-00129, SRG-OS-000324-GPOS-00125

ID
SV-223882r998484_rule
Version
TSS0-ES-000090
Severity
High
Updated

Remediation Templates

A Manual Procedure

Ensure the accesses are being logged.