Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-18011 | ZCLSR038 | SV-27189r2_rule | Medium |
Description |
---|
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data. |
STIG | Date |
---|---|
z/OS CL/SuperSession for RACF STIG | 2018-04-04 |
Check Text ( C-3213r3_chk ) |
---|
Refer to the following report produced by the RACF Data Collection: - RACFCMDS.RPT(SETROPTS) Automated Analysis Refer to the following report produced by the RACF Data Collection: - PDI(ZCLSR038) If the CL/SuperSession resource class(es) is (are) active, this is not a finding. |
Fix Text (F-18534r2_fix) |
---|
The IAO will ensure that the CL/SuperSession Resource Class(es) is (are) active. The SYS3.OMEGAMON.qualifier.RLSPARM(KLVINNAM) member contains a "CLASSES=" entry, this entry identifies the member that contains the "VGWAPLST EXTERNAL=" entry. The "VGWAPLST EXTERNAL=" entry identifies the resource class that is used by CL/SuperSession and this resource class will be active. Current guidance identifies that APPL is the resource class identified in the above location. Use the following commands as an example: SETROPTS CLASSACT(APPL) |