IBM z/OS LNKAUTH=APFTAB must be specified in the IEASYSxx member(s) in the currently active parmlib data set(s).
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-223565 | SRG-OS-000095-GPOS-00049 | ACF2-OS-000290 | SV-223565r958478_rule | 2025-03-11 | 9 |
| Description |
|---|
| Failure to specify LINKAUTH=APFTAB allows libraries other than those designated as APF to contain authorized modules which could bypass security and violate the integrity of the operating system environment. This expanded authorization list inhibits the ability to control inclusion of these modules. |
| ℹ️ Check |
|---|
| Refer to IEASYS00 member in SYS1.PARMLIB Concatenation. If LNKAUTH=APFTAB is not specified, this is a finding. |
| ✔️ Fix |
|---|
| Configure LNKAUTH=APFTAB in the IEASYS00 member of PARMLIB. |