STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

ACF2 PSWD GSO record value must be set to require 24 hours/1 day as the minimum password lifetime.

DISA Rule

SV-223507r695439_rule

Vulnerability Number

V-223507

Group Title

SRG-OS-000075-GPOS-00043

Rule Version

ACF2-ES-000900

Severity

CAT II

CCI(s)

• CCI-000198 - The information system enforces minimum password lifetime restrictions.

Weight

10

Fix Recommendation

Configure Password option "PSWDMIN" to minimum of "1" day.

Check Contents

From an ACF command screen enter:
SET CONTROL(GSO)
LIST PSWD

If "PSWDMIN" is set "1", this is not a finding.

Vulnerability Number

V-223507

Documentable

False

Rule Version

ACF2-ES-000900

Severity Override Guidance

From an ACF command screen enter:
SET CONTROL(GSO)
LIST PSWD

If "PSWDMIN" is set "1", this is not a finding.

Check Content Reference

M

Target Key

4100

Comments