STIGQter: STIG Summary: IBM z/OS TSS Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021: STIGQter: STIG Summary: IBM z/OS TSS Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:SV-224022r561402_rule
V-224022
SRG-OS-000342-GPOS-00133
TSS0-OS-000250
CAT II
10
Ensure that an automated process is in place to collect SMF data.
Review SMF data collection and retention processes. Develop processes that are automatically started to dump SMF collection files immediately upon their becoming full.
To ensure that all SMF data is collected in a timely manner, and to reduce the risk of data loss, ensure that automated mechanisms are in place to collect and retain all SMF data produced on the system. Dump the SMF files (MANx) in systems based on the following guidelines:
-Dump each SMF file as it fills up during the normal course of daily processing.
-Dump all remaining SMF data at the end of each processing day.
Establish a process using Audit logging.
Ask the system administrator if there is an automated process is in place to collect and retain all SMF data produced on the system.
If, based on the information provided, it can be determined that an automated process is in place to collect and retain all SMF data produced on the system, this is not a finding.
If it cannot be determined this process exists and is being adhered to, this is a finding.
V-224022
False
TSS0-OS-000250
Ask the system administrator if there is an automated process is in place to collect and retain all SMF data produced on the system.
If, based on the information provided, it can be determined that an automated process is in place to collect and retain all SMF data produced on the system, this is not a finding.
If it cannot be determined this process exists and is being adhered to, this is a finding.
M
4102