Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
BMC CONTROL-M configuration/parameter values are not specified properly.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-18014 | ZCTMA040 | SV-31975r1_rule | ECCD-1 ECCD-2 | Medium |
| Description |
|---|
| BMC CONTROL-M configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be weakened. This exposure may threaten the availability of the product applications, and compromise the confidentiality of customer data. |
| STIG | Date |
|---|---|
| z/OS BMC CONTROL-M for ACF2 STIG | 2015-01-15 |
Details
| Check Text ( C-3612r1_chk ) |
|---|
| Refer to the following applicable reports produced by the z/OS Data Collection: - IOA.RPT(SECPARM) Automated Analysis Refer to the following report produced by the z/OS Data Collection: - PDI(ZCTM0040) The following keywords will have the specified values in the BMC CONTROL-M security parameter member: Keyword Value DEFMCHKM $$CTMEDM SECTOLM NO DFMM01 EXTEND DFMM02 EXTEND DFMM08 EXTEND SAFJCARD U MSUBCHK NO |
| Fix Text (F-6679r1_fix) |
|---|
| The BMC CONTROL-M Systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct. Set the standard values for the BMC CONTROL-M security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below. Keyword Value DEFMCHKM $$CTMEDM SECTOLM NO DFMM01 EXTEND DFMM02 EXTEND DFMM08 EXTEND SAFJCARD U MSUBCHK NO |