TSO additional checks (PASSWORDPREPROMPT, RACF APPL, USPF WORKSTATION AGENT)
This IronSphere eXtra for TSO (RACF) fix introduces three ner checks:
MVR-TSO-0FD-00: TSO APPL CHECK IS NOT PERFORMED DURING LOGON.
MVR-TSO-0FE-00: TSOFE TSO/ISPF WORKSTATION AGENT USAGE IS NOT PREVENTED.
MVR-TSO-0FF-00: TSO PASSWORDPREPROMPT OPTION IS NOT ENABLED.
Define the check to IronSphere by adding the following to member QIFCHKxx of SQIFPARM dataset:
{
"NAME":"QIFTSOFD",
"CKNAME":"MVR_TSO_0FD_00",
"ESM":"RACF",
"PARM":" ",
"STRTHH":"06",
"STRTMM":"00",
"INTERVAL":"12",
"STATUS":"ACTIVE",
"TITLE":"TSO/ISPF Workstation Agent usage is not
prevented.
"
},
{
"NAME":"QIFTSOFE",
"CKNAME":"MVR_TSO_0FE_00",
"ESM":"RACF",
"PARM":" ",
"STRTHH":"06",
"STRTMM":"00",
"INTERVAL":"12",
"STATUS":"ACTIVE",
"TITLE":"RSO APPL check is not performed during login.
"
},
{
"NAME":"QIFTSOFE",
"CKNAME":"MVR_TSO_0FE_00",
"ESM":"RACF",
"PARM":" ",
"STRTHH":"06",
"STRTMM":"00",
"INTERVAL":"12",
"STATUS":"ACTIVE",
"TITLE":"TSO PASSWORDPREPROMPT option is not enabled.
"
},