Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
There are LOGONIDs assigned for started tasks that do not have the STC attribute specified in the associated LOGONID record.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-161 | ACF0600 | SV-161r2_rule | DCCS-1 DCCS-2 | Medium |
| Description |
|---|
| If a LOGONID for a started task does not have the STC attribute specified, this could result in system or application unavailability. |
| STIG | Date |
|---|---|
| z/OS ACF2 STIG | 2018-10-04 |
Details
| Check Text ( C-17774r1_chk ) |
|---|
| a) Refer to the following report produced by the ACF2 Data Collection: - ACF2CMDS.RPT(ATTSTC) b) Identify all logonids assigned to started tasks. c) Review every logonid record assigned to started tasks to ensure each one has the STC attribute specified. d) If all logonids identified as started tasks have the STC attribute specified, there is NO FINDING. e) If any logonid identified as a started task does not have the STC attribute specified, this is a FINDING. |
| Fix Text (F-16884r1_fix) |
|---|
| The IAO will ensure that all logonid records assigned to started tasks have the STC attribute specified. All started tasks will be assigned an individual logonid. The logonid for a Started Task Control (STC) will be granted the minimum privileges necessary for the STC to function. In addition to the default LID field settings, all STC logonids will have the following field setting: STC Example: SET LID INSERT logonid STC |