There are LOGONIDs assigned for started tasks that do not have the STC attribute specified in the associated LOGONID record.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-161	ACF0600	SV-161r2_rule	DCCS-1 DCCS-2	Medium

Description
If a LOGONID for a started task does not have the STC attribute specified, this could result in system or application unavailability.

STIG	Date
z/OS ACF2 STIG	2019-12-12

Details

Check Text ( C-17774r1_chk )
a) Refer to the following report produced by the ACF2 Data Collection: - ACF2CMDS.RPT(ATTSTC) b) Identify all logonids assigned to started tasks. c) Review every logonid record assigned to started tasks to ensure each one has the STC attribute specified. d) If all logonids identified as started tasks have the STC attribute specified, there is NO FINDING. e) If any logonid identified as a started task does not have the STC attribute specified, this is a FINDING.

Check Text ( C-17774r1_chk )

a) Refer to the following report produced by the ACF2 Data Collection:

- ACF2CMDS.RPT(ATTSTC)

b) Identify all logonids assigned to started tasks.

c) Review every logonid record assigned to started tasks to ensure each one has the STC attribute specified.

d) If all logonids identified as started tasks have the STC attribute specified, there is NO FINDING.

e) If any logonid identified as a started task does not have the STC attribute specified, this is a FINDING.

Fix Text (F-16884r1_fix)
The IAO will ensure that all logonid records assigned to started tasks have the STC attribute specified. All started tasks will be assigned an individual logonid. The logonid for a Started Task Control (STC) will be granted the minimum privileges necessary for the STC to function. In addition to the default LID field settings, all STC logonids will have the following field setting: STC Example: SET LID INSERT logonid STC

Fix Text (F-16884r1_fix)

The IAO will ensure that all logonid records assigned to started tasks have the STC attribute specified.

All started tasks will be assigned an individual logonid. The logonid for a Started Task Control (STC) will be granted the minimum privileges necessary for the STC to function. In addition to the default LID field settings, all STC logonids will have the following field setting:

STC

Example:

SET LID
INSERT logonid STC