STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

ACF2 PSWD GSO record value must be set to require a 60-day maximum password lifetime restriction.

DISA Rule

SV-223506r695437_rule

Vulnerability Number

V-223506

Group Title

SRG-OS-000076-GPOS-00044

Rule Version

ACF2-ES-000890

Severity

CAT II

CCI(s)

• CCI-000199 - The information system enforces maximum password lifetime restrictions.

Weight

10

Fix Recommendation

Configure Password option "PSWDMAX" to "60" days.

Check Contents

From an ACF command screen enter:
SET CONTROL(GSO)
LIST PSWD

If "PSWDMAX" is set to "60", this is not a finding.

Vulnerability Number

V-223506

Documentable

False

Rule Version

ACF2-ES-000890

Severity Override Guidance

From an ACF command screen enter:
SET CONTROL(GSO)
LIST PSWD

If "PSWDMAX" is set to "60", this is not a finding.

Check Content Reference

M

Target Key

4100

Comments