z/OS Compuware Abend-AID for ACF2 STIG Version Comparison

There are 4 differences between versions v6 r5 (Oct. 23, 2015) (the "left" version) and v6 r7 (Nov. 23, 2022) (the "right" version).

Check ZAID0040 was changed between these two versions. Green, underlined text was added, red, struck-out text was removed.

The regular view of the left check and right check may be easier to read.

Title

Compuware Abend-AID external security options will must be specified properly.

Check Content

Examine the Enterprise Common Components (ECC) started task procedure. (This can usually be found in the system PROCLIBs). Refer to the contents of the data set specified in the FDBDPARM CWPARM DD statement. Automated statement of the started task procedures. Automated Analysis Refer to the following report produced by the z/OS Data Collection: - PDI(ZAID0040) Ensure Collection: - PDI(ZAID0040) Review the Member name listed. If the following Compuware Abend-AID parameter is (are) specified for each component, in the data set specified in the FDBDPARM DD statement of the started task procedures. If the following guidance is true, this is not a finding. Parameter Value EXTERNAL_SECURITY_ENABLED YES finding. Member Name: AABD00 - Abend-AID batch dump capture address space EXTERNAL_SECURITY_ENABLED=YES Member Name: AATD00 - Abend-AID CICS Transaction Dump Capture Address Space EXTERNAL_SECURITY_ENABLED=YES Member Name: AAVW00 - Abend-AID viewing server EXTERNAL_SECURITY_ENABLED=YES

Discussion

Compuware Abend-AID offers external security interfaces that are controlled by parameters specified in FDBDPARM DD statement of the started task procedures. These interfaces provide security controls for Abend-AID. Without proper controls to ensure that security is active, the integrity of the Compuware Abend-AID System and the confidentiality of data stored on the system may be compromised.

Fix

In The systems programmer/IAO will ensure that the Compuware Abend-AID parameter is (are) specified. Compuware Abend-AID security interfaces are controlled by parameters coded in the data set specified in the FDBDPARM CWPARM DD statement of from the ECC started task procedures. Parameter Value EXTERNAL_SECURITY_ENABLED YES procedure, specify the parameter values for each component in the respective members as follows: Member Name: AABD00 - Abend-AID batch dump capture address space EXTERNAL_SECURITY_ENABLED=YES Member Name: AATD00 - Abend-AID CICS Transaction Dump Capture Address Space EXTERNAL_SECURITY_ENABLED=YES Member Name: AAVW00 - Abend-AID viewing server EXTERNAL_SECURITY_ENABLED=YES