+APP.4.6.A10 Execution of Operating System Commands (S)

APP.4.6.A10 Execution of Operating System Commands (S)

Each call of a permitted operating system command SHOULD be preceded by a corresponding authorisation check (authorisation object S_LOG_COM). User input SHOULD NOT be part of a command. For this reason, operating system calls SHOULD only be executed using standard SAP function modules intended for this purpose.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.14 Interception of Information / Espionage
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information