The following tests are performed by AZScan when reviewing AS400 systems.
| No |
Code |
Description |
Risk |
| 1 |
SYSSET |
System
settings |
|
| 1 1.1 |
QSEC |
Security
level |
Medium |
| 2 1.2 |
QAUTOC |
Auto
configuration |
Low |
| 3 1.3 |
QAUTOVRT |
Auto
virtual |
Low |
| 4 1.4 |
QCRTAUT |
Default
public authority |
Medium |
| 5 1.5 |
QALWUD |
Allow
user domain |
Low |
| 6 1.6 |
QAOR |
Allow
object restore |
Low |
| 7 1.7 |
QATNPGM |
Attention
program |
Medium |
| 2 |
SYSPWDS |
System
passwords |
|
| 8 2.1 |
QPWDLVL |
Password
level |
Low |
| 9 2.2 |
QPWDEXPITV |
Password
expiration interval |
High |
| 10 2.3 |
QPWDLMTAJC |
Password
limit adjacent digits |
Low |
| 11 2.4 |
QPWDLMTCHR |
Password
limit characters |
Low |
| 12 2.5 |
QPWDLMTREP |
Password
limit repetition |
Low |
| 13 2.6 |
QPWDMINLEN |
Password
minimum length |
High |
| 14 2.7 |
QPWDMAXLEN |
Password
maximum length |
Low |
| 15 2.8 |
QPWDPOSDIF |
Password
position different |
Low |
| 16 2.9 |
QPWDRQDDGT |
Password
does not require digits |
Medium |
| 17 2.10 |
QPWDRQDDIF |
Password
required to be different |
High |
| 18 2.11 |
QPWDVLDPGM |
Password
validation program |
Low |
| 3 |
USERS |
Users |
|
| 19 3.1 |
UCLASS |
User
Classes |
High |
| 20 3.2 |
DISPROF |
Users
with disabled profiles |
Low |
| 21 3.3 |
CURLIB |
Users
current library |
Low |
| 22 3.4 |
INLPGM |
Users
initial programs |
Low |
| 23 3.5 |
INLMNU |
Users
initial menu |
Low |
| 24 3.6 |
DSPSGNINF |
Users
display sign-on information |
Medium |
| 25 3.7 |
LMTCPB |
Users
limit capability |
Low |
| 26 3.8 |
QLMTDEVSSN |
Users
with limited device sessions |
Low |
| 27 3.9 |
SPCENV |
Users
with special environments |
Low |
| 4 |
SPAUTHORTY |
Special
Authorities |
|
| 28 4.1 |
ALLOBJ |
Users
with all objects authority |
High |
| 29 4.2 |
SECADM |
Users
with security administration authority |
High |
| 30 4.3 |
JOBCTL |
Users
with job control authority |
Medium |
| 31 4.4 |
SPLCTL |
Users
with spool control Authority |
Medium |
| 32 4.5 |
SAVSYS |
Users
with save system authority |
Medium |
| 33 4.6 |
SERVICE |
Users
with service authority |
Medium |
| 34 4.7 |
AUDIT |
Users
with audit authority |
Low |
| 35 4.8 |
IOSYSCFG |
Users
with system configuration authority |
Low |
| 5 |
UPASSWORD |
User
passwords |
|
| 36 5.1 |
PWDEXPITV |
Users
password expiry interval |
Medium |
| 37 5.2 |
PWDEXPD |
Users
with password set to expired |
Medium |
| 38 5.3 |
PWDLCHG |
Users
password last changed |
Medium |
| 39 5.4 |
PWDIBMPRO |
IBM
system profiles where password <> *NONE |
Low |
| 6 |
SIGNON |
Signon
attempts allowed |
|
| 40 6.1 |
QMAXSIGN |
Maximum
sign-on attempts |
Medium |
| 41 6.2 |
QMAXSGNACN |
Maximum
sign-On attempt action |
Low |
| 42 6.3 |
QRMTSIGN |
Remote
sign-on |
Medium |
| 43 6.4 |
QLMTESCOFR |
Limit
security officer |
Low |
| 44 6.5 |
QDSPSGNINF |
Display
sign-on information |
Medium |
| 45 6.6 |
QLMTDEVSSN |
Limit
device sessions |
Low |
| 46 6.7 |
QINACTITV |
Inactive
Interval |
Medium |
| 47 6.8 |
QINACTMSGQ |
Inactive
Message Queue |
Low |
| 7 |
GROUPS |
Groups |
|
| 48 7.1 |
GROUPS |
Users
in each group |
Low |
| 8 |
AUDITING |
Auditing |
|
| 49 8.1 |
QAUDCTL |
Audit
control |
Low |
| 50 8.2 |
QAUDLVL |
Audit
level |
Medium |
| 51 8.3 |
QAEA |
Audit
end action |
Low |
| 52 8.4 |
QAFREQ |
Audit
frequency level |
Low |
| 53 8.5 |
QCRTOBJAUD |
Create
object audit |
Low |
