z/SECURE STIG compliance for MAINT and JOB

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

z/SECURE STIG compliance requires MAINT logonids to have JOB.  Is that really required?  Noe of the logonids have JOB.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

MAINT ids need to have STC or JOB.  But JOB is only validated if JOBCK is set in the GSO record OPTS.  If that is not, JOB is not validated for any users running a batch JOB.  Audit shoukd require JOBCK.