Rule ID
SV-224659r1145782_rule
Version
V7R2
CCIs
Compuware Abend-AID offers external security interfaces that are controlled by parameters specified in FDBDPARM DD statement of the started task procedures. These interfaces provide security controls for Abend-AID. Without proper controls to ensure that security is active, the integrity of the Compuware Abend-AID System and the confidentiality of data stored on the system may be compromised.
Examine the Enterprise Common Components (ECC) started task procedure. (This can usually be found in the system PROCLIBs). Refer to the contents of the data set specified in the CWPARM DD statement. Automated Analysis Refer to the following report produced by the z/OS Data Collection: - PDI(ZAID0040). Review the Member name listed. If the following is specified for each component, this is not a finding. Member Name: AABD00 - Abend-AID batch dump capture address space EXTERNAL_SECURITY_ENABLED=YES Member Name: AATD00 - Abend-AID CICS Transaction Dump Capture Address Space EXTERNAL_SECURITY_ENABLED=YES Member Name: AAVW00 - Abend-AID viewing server EXTERNAL_SECURITY_ENABLED=YES
In the data set specified in the CWPARM DD statement from the ECC started task procedure, specify the parameter values for each component in the respective members as follows: Member Name: AABD00 - Abend-AID batch dump capture address space EXTERNAL_SECURITY_ENABLED=YES Member Name: AATD00 - Abend-AID CICS Transaction Dump Capture Address Space EXTERNAL_SECURITY_ENABLED=YES Member Name: AAVW00 - Abend-AID viewing server EXTERNAL_SECURITY_ENABLED=YES