STIGUI
V-223786CAT II — Medium severitySV-223786r958478_rule

IBM z/OS LNKAUTH=APFTAB must be specified in the IEASYSxx member(s) in the currently active parmlib data set(s).

Rule version RACF-OS-000300 · STIG v9 · 2026-09-01

Discussion

Failure to specify LINKAUTH=APFTAB allows libraries other than those designated as APF to contain authorized modules which could bypass security and violate the integrity of the operating system environment. This expanded authorization list inhibits the ability to control inclusion of these modules.

Check

Refer to IEASYS00 member in SYS1.PARMLIB Concatenation.

If LNKAUTH=APFTAB is not specified, this is a finding.

Fix

Configure LNKAUTH=APFTAB in the IEASYS00 member of PARMLIB.

Identifiers

Group ID
V-223786
Group title
SRG-OS-000095-GPOS-00049
Rule ID
SV-223786r958478_rule
Check ID
C-25459r515046_chk
Fix ID
F-25447r515047_fix