The current standard of encrypting the Natural Security password with Electronic Code Book (ECB) encryption to not comply with IRS standards. Enhance Natural Security so that the NSC password is encrypted to meet FIPS 140-3 compliance.
From SI-505073, create a utility to allow the decryption of NSC records after they have been extracted from a PLOG. This would be an alternative / secondary way to retrieve modifications to the FSEC when the NSC logging records are not available. ...
If a Natural module exists in a library AND one of its steplibs, it should be possible to DISALLOW the module in the library and ALLOW it in the steplib (or vice versa).
If NSC is active, any person can start and NDV server, even
with an invalid INITIAL_USERID, so it is not clear why there is no
protection to start an NDV server when NSC is active.
Guest
over 2 years ago
in Natural for z/OS / Natural Development Server (NDV) / Natural Security (NSC)
0
Not in Plan
