STIGQter: STIG Summary: IBM z/OS RACF Security Technical Implementation Guide Version: 8 Release: 3 Benchmark Date: 23 Apr 2021:

IBM RACF must define WARN = NO on all profiles.

DISA Rule

SV-223703r604139_rule

Vulnerability Number

V-223703

Group Title

SRG-OS-000480-GPOS-00229

Rule Version

RACF-ES-000560

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Define each dataset and resource profile with WARN = NO

Check Contents

Review all Dataset and resource profiles in the RACF database.

If any are not defined with WARN = NO, this is a finding.

Vulnerability Number

V-223703

Documentable

False

Rule Version

RACF-ES-000560

Severity Override Guidance

Review all Dataset and resource profiles in the RACF database.

If any are not defined with WARN = NO, this is a finding.

Check Content Reference

M

Target Key

4101

Comments