Skip to content

Quest NC-Pass will be properly defined to the Facility Matrix Table.

An XCCDF Rule

Description

Improperly defined security controls for Quest NC-Pass could result in the compromise of the network, operating system, and customer data.

ID
SV-225597r472592_rule
Version
ZNCPT036
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

The IAO working with the systems programmer will ensure the Facility Matrix Table for Quest NC-Pass is proper defined using the following example:

*****NCPASS
FAC(USERxx=NAME=NCPASS,PGM=NCS,ID=nn,ACTIVE,NOASUBM)
FAC(NCPASS=LUMSG,STMSG,NORNDPW,WARNPW,MODE=FAIL)
FAC(NCPASS=LOG(SMF,INIT,MSG,SEC9),UIDACID=8,LOCKTIME=000)