IBM z/OS LNKAUTH=APFTAB must be specified in the IEASYSxx member(s) in the currently active parmlib data set(s).
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-223786
RACF-OS-000300
SV-223786r958478_rule
Medium
Description
Failure to specify LINKAUTH=APFTAB allows libraries other than those designated as APF to contain authorized modules which could bypass security and violate the integrity of the operating system environment. This expanded authorization list inhibits the ability to control inclusion of these modules.