IBM z/OS LNKAUTH=APFTAB must be specified in the IEASYSxx member(s) in the currently active parmlib data set(s).
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-223565 | SRG-OS-000095-GPOS-00049 | ACF2-OS-000290 | SV-223565r958478_rule | 2026-03-09 | 9 |
Description
Failure to specify LINKAUTH=APFTAB allows libraries other than those designated as APF to contain authorized modules which could bypass security and violate the integrity of the operating system environment. This expanded authorization list inhibits the ability to control inclusion of these modules.
ℹ️ Check
Refer to IEASYS00 member in SYS1.PARMLIB Concatenation.
If LNKAUTH=APFTAB is not specified, this is a finding.
✔️ Fix
Configure LNKAUTH=APFTAB in the IEASYS00 member of PARMLIB.