topic Re: SM19 Security Audit: Display Kernel Parameters without modified authority in Application Development and Automation Discussions

SM19 Security Audit: Display Kernel Parameters without modified authority

Former Member — Tue, 09 Dec 2014 10:19:35 GMT

Hello Experts,

is there a Chance to protect the Kernel Parameters in SM19 Security Audit against unauthorized users who wants to Change/modify the setting.

Exist there a user role or Profile which allow this user only to Display These Kernel Paramters Settings?

Thank you

Best Regards

Re: SM19 Security Audit: Display Kernel Parameters without modified authority

Former Member — Tue, 09 Dec 2014 21:26:28 GMT

Dear Mr. Sindelar,

Perhaps the screenshot is from 7.4 because I don't see it in my system. You may have already thought of this, if not then try this:

1. Create a temporary role in Sand/Development box and assign SM19 and SU53 to the role menu

2. Assign above role to a test ID

3. Login with the test ID and see if it is working the way it should

4. Go back to PFCG and start de-activating objects one by one and test

5. It may take you some time, but you will be able to find out the object that controls the parameters, if different from below.

Objects: S_C_FUNCT, S_ADMI_FCD

Sincerely,

Re: SM19 Security Audit: Display Kernel Parameters without modified authority

mvoros — Tue, 09 Dec 2014 22:10:36 GMT

Hi,

SM19 does not support access control on tab level. So a user has access to all tabs or none in change mode. S_ADMI_FCD can be used to control read/edit. There are two different values.

Cheers