Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.
An XCCDF Rule
Description
<VulnDiscussion>Unrestricted control over the issuing of system commands by a Logical Partition could result in unauthorized data access and inadvertent updates. This could result in severe damage to system resources.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>System Administrator</Responsibility><Responsibility>Systems Programmer</Responsibility><IAControls>ECCD-1, ECCD-2</IAControls>
- ID
- SV-30055r2_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Review the Security Definition parameters specified under PR/SM, and turn off the Cross Partition Control option.