A fix is available
APAR status
Closed as program error.
Error description
STIG check ZWMQ0052 missing customization member. Running report ZWQ0052 (MQ Connections) generatest a non-compliant result like this: "MQCONN ssid.BATCH resources must be restricted to only TSO and batch job userids. (AUTOAUDT)"
Local fix
Not Applicable
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure Audit exploiting STIG * * compliance rule ZWMQ0052. * **************************************************************** * PROBLEM DESCRIPTION: The zSecure Audit STIG compliance rule * * ZWMQ0052 does not have a customization * * member for users of applications that * * connect to MQ Queues. * **************************************************************** * RECOMMENDATION: Apply the PTF provided and review the * * documentation update. * **************************************************************** The zSecure Audit STIG compliance rule ZWMQ0052 (IBM MQ for z/OS MQCONN Class resources must be protected in accordance with security requirements) does not not have a customization member for users of applications that connect to MQ Queues.
Problem conclusion
zSecure Audit has been modified so that STIG rule ZWMQ0052 evaluation uses a customization member for users of applications that connect to MQ Queues. Please note the documentation update as provided by the APAR tracking comment data.
Temporary fix
Comments
APAR Information
APAR number
OA58648
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
240
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2019-11-11
Closed date
2019-12-13
Last modified date
2020-01-03
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ01604
Modules/Macros
C2RG@DEF CKAGWM52 CKAIRULE CKAZCUST
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
R240 PSY UJ01604
UP19/12/18 P F912
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"240","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
16 August 2024