STIGQter: STIG Summary: IBM z/OS RACF Security Technical Implementation Guide Version: 8 Release: 3 Benchmark Date: 23 Apr 2021: STIGQter: STIG Summary: IBM z/OS RACF Security Technical Implementation Guide Version: 8 Release: 3 Benchmark Date: 23 Apr 2021:SV-223778r604139_rule
V-223778
SRG-OS-000480-GPOS-00227
RACF-OS-000220
CAT II
10
System programmers will ensure that the old OS Password Protection is not used and any data protected by the old OS Password technology is removed and protection is replaced by the ACP.
Review the contents of the PASSWORD data set. Ensure that any protections it provides are provided by the ACP and delete the PASSWORD data set.
Access to data sets on z/OS systems can be protected using the OS password capability of MVS. This capability has been available in MVS for many years, and its use is commonly found in data centers. Since the advent of ACPs, the use of OS passwords for file protection has diminished, and is commonly considered archaic and of little use. The use of z/OS passwords is not supported by all the ACPs.
Ask the system administrator to determine if the system PASSWORD data set and OS passwords are being used.
If, based on the information provided, it can be determined that the system PASSWORD data set and OS passwords are not used, this is not a finding.
If it is evident that OS passwords are utilized, this is a finding.
V-223778
False
RACF-OS-000220
Ask the system administrator to determine if the system PASSWORD data set and OS passwords are being used.
If, based on the information provided, it can be determined that the system PASSWORD data set and OS passwords are not used, this is not a finding.
If it is evident that OS passwords are utilized, this is a finding.
M
4101