#DATA SET AND HFS FILE SYSTEM ACCESS SSH PASSWORD#

The ACP security data sets and/or databases must be properly protected. This authorization allows a program to bypass various levels of security checking. LPA modules, once loaded into the Link Pack Area, are capable of performing APF-authorized functions. Write or greater access to all LPA libraries must be limited to system programmers only. Unauthorized access could result in the compromise of the.

SYS1.PARMLIB contains the parameters which control system IPL, configuration characteristics, security facilities, and performance. SYS1.PARMLIB is not limited to only system programmers. If an unauthorized user has access to SYS1.UADS, they could enter.

#DATA SET AND HFS FILE SYSTEM ACCESS SSH PASSWORD#

SYS1.UADS is a dataset where LOGONIDs will be maintained with applicable password information when the ACP is not functional. LOGONIDs must not be defined to SYS1.UADS for non-emergency use. User identifiers (ACF2 logonids, RACF userids, and Top Secret ACIDs), groups, and started tasks that use z/OS UNIX facilities are defined to an ACP with attributes including UID and GID.

Cryptographic modules must adhere to the higher standards approved by the federal. Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The SSH daemon must be configured to use a FIPS 140-2 compliant cryptographic algorithm. Findings (MAC II - Mission Support Sensitive) Finding ID

Data set and hfs file system access ssh