The ROSCOE's Resouce Class is not defined or active in the ACP.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-18011	ZROSA038	SV-24845r1_rule	DCCS-1 DCCS-2	Medium

Description
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

STIG	Date
z/OS ROSCOE for ACF2 STIG	2015-01-16

Details

Check Text ( C-26480r1_chk )
a) Refer to the following report produced by the ACF2 Data Collection: - ACF2CMDS.RPT(ACFGSO) b) Ensure that the following GSO CLASMAP record entries are defined: CLASMAPqual RESOURCE(ROSRES) RSRCTYPE(ROS) c) If all of the items in (b) are true, there is NO FINDING. d) If any item in (b) is untrue, this is a FINDING.

Fix Text (F-323r1_fix)
The IAO will use SAF security to define and protect the Products resouce class(es). Ensure that the following GSO CLASMAP record entry(ies) is (are) defined: CLASMAP.ROSCOE ENTITYLN(39) RESOURCE(ROSRES) RSRCTYPE(ROS) Example: SET C(GSO) LIST CLASMAP.ROSCOE INSERT CLASMAP.ROSCOE ENTITYLN(39) RESOURCE(ROSRES) RSRCTYPE(ROS) F ACF2,REFRESH(CLASMAP)