search cancel

z/SECURE STIG compliance for MAINT and JOB

book

Article ID: 133847

calendar_today

Updated On:

Products

ACF2 ACF2 - z/OS ACF2 - MISC

Issue/Introduction

z/SECURE STIG compliance requires MAINT logonids to have JOB.  Is that really required?  Noe of the logonids have JOB.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

MAINT ids need to have STC or JOB.  But JOB is only validated if JOBCK is set in the GSO record OPTS.  If that is not, JOB is not validated for any users running a batch JOB.  Audit shoukd require JOBCK.