STIGQter: STIG Summary: IBM z/OS TSS Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

The CA-TSS INACTIVE Control Option must be properly set.

DISA Rule

SV-223954r561402_rule

Vulnerability Number

V-223954

Group Title

SRG-OS-000118-GPOS-00060

Rule Version

TSS0-ES-000810

Severity

CAT II

CCI(s)

• CCI-000795 - The organization manages information system identifiers by disabling the identifier after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Evaluate the impact associated with implementation of the control option. Develop a plan of action to set the INACTIVE Control Option to a value of "0" days and proceed with the change.

The INACTIVE Control Option value is set properly with the command:

TSS MODIFY INACTIVE(0)

Check Contents

From the ISPF Command Shell enter:
TSS MODIFY STATUS

If the INACTIVE Control Option is set to a value of "0", this is not a finding.

Vulnerability Number

V-223954

Documentable

False

Rule Version

TSS0-ES-000810

Severity Override Guidance

From the ISPF Command Shell enter:
TSS MODIFY STATUS

If the INACTIVE Control Option is set to a value of "0", this is not a finding.

Check Content Reference

M

Target Key

4102

Comments