IBM System Display and Search Facility (SDSF) Resource Class will be defined or active in the ACP.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

IBM System Display and Search Facility (SDSF) Resource Class will be defined or active in the ACP.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-224322	ZISFA038	SV-224322r822588_rule		Medium

Description
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

STIG	Date
z/OS IBM System Display and Search Facility for ACF2 Security Technical Implementation Guide	2022-06-27

Details

Check Text ( C-25999r822586_chk )
Refer to the following report produced by the ACF2 Data Collection: - ACF2CMDS.RPT(ACFGSO) If the following GSO CLASMAP record entry(ies) is (are) defined, this is not a finding. CLASMAP.SDSF RESOURCE(SDSF) RSRCTYPE(xxx) ENTITYLN(nn) Note: The site determines the appropriate three-letter RSRCTYPE that is unique for the SDSF. The ENTITYLN must be appropriate for the site’s installation.

Fix Text (F-25987r822587_fix)
Use SAF security to define and protect the IBM SDSF resource class(es). Use the following commands as an example: CLASMAP.SDSF RESOURCE(SDSF) RSRCTYPE(SDF) ENTITYLN(39)