IDMS components that cannot be uninstalled must be disabled.
An XCCDF Rule
Description
<VulnDiscussion>DBMSs must adhere to the principles of least functionality by providing only essential capabilities. At installation, all CA IDMS products are installed but can be disabled (i.e., forced to fail if invoked).</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-251610r807697_rule
- Severity
- Low
- References
- Updated
Remediation - Manual Procedure
Edit RHDCPINT source and remove or comment out products identified as unused. Reassemble, relink, and implement changes by either recycling any affected CV or by issuing the following commands in any affected CV:
DCMT VARY NUCLEUS MODULE RHDCPINT NEW COPY
DCMT VARY NUCLEUS RELOAD