ACF2 auditing

[bart2k () hushmail com]

Hi all,

I'm running a pen-test/audit on an OS/390 system running ACF2.  I've googled and still haven't found any documents for 
best practice or common mistakes made with ACF2 rule sets, has anyone come across a document like this and willing to 
share the web-location of such a document?

Thanks in-advance
Bart



Get your free encrypted email at https://www.hushmail.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/