Keywords
The following table indicates how each keyword in the IBM iSeries compliance checks can be used:
Keyword |
Example Use and Supported Settings |
---|---|
type |
AUDIT_SYSTEMVAL SHOW_SYSTEMVAL |
systemvalue |
This keyword is used to specify a specific value to be checked within the IBM iSeries system. Example: systemvalue: "QALWUSRDMN" |
description |
This keyword provides the ability to add a brief description of the check that is being performed. It is strongly recommended that the Example: description: "Allow User Domain Objects (QALWUSRDMN) - '*all'" |
value_type |
This keyword is used to define the type of value (either “POLICY_DWORD” or “POLICY_TEXT”) being checked on the IBM iSeries system. Example: value_type: "POLICY_DWORD" Example: value_type: "POLICY_TEXT" |
value_data |
This keyword defines that data value that is expected for a system value. Example: value_type: "^([6-9]|[1-9][0-9]+)$" |
check_type |
This keyword defines the type of check being used against a data value. Examples: check_type: "CHECK_EQUAL" check_type: "CHECK_NOT_EQUAL" check_type: "CHECK_GREATER_THAN" check_type: "CHECK_GREATER_THAN_OR_EQUAL" check_type: "CHECK_LESS_THAN" check_type: "CHECK_LESS_THAN_OR_EQUAL" check_type: "CHECK_REGEX" <custom_item> type: AUDIT_SYSTEMVAL systemvalue: "QUSEADPAUT" description: "Use Adopted Authority (QUSEADPAUT) - '!= *none'" value_type: POLICY_TEXT value_data: "*none" check_type: CHECK_NOT_EQUAL </custom_item> |
info |
This keyword is used to add a more detailed description to the check that is being performed such as a regulation, URL, corporate policy, or other reason why the setting is required. Multiple |