+SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S)

SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S)

The parameters of Unix System Services (USS) SHOULD be set according to the functional and security specifications at hand while taking the available resources into account. HFS and zFS files containing USS file systems SHOULD be backed up via RACF profiles and included in a backup concept. The root file system SHOULD also be mounted with the read-only option. In the USS file system, APF (authorised program facility) authorisations SHOULD NOT be granted using a file security packet (FSP). The modules of APF files of the z/OS operating system SHOULD be loaded instead. The assignment between USS user IDs and z/OS user IDs SHOULD be clear. Authorisations under USS SHOULD be assigned using the RACF class UNIXPRIV and NOT by assigning UID 0. The USS SHOULD be checked and monitored using the same mechanisms used for z/OS.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.37 Repudiation of Actions
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information