STIGQter: STIG Summary: z/OS BMC MAINVIEW for z/OS for RACF STIG Version: 6 Release: 7 Benchmark Date: 20 Jan 2015:

BMC Mainview for z/OS Resource Class will be defined or active in the ACP.

DISA Rule

SV-33845r2_rule

Vulnerability Number

V-18011

Group Title

ZB000038

Rule Version

ZMVZR038

Severity

CAT II

CCI(s)

• CCI-000336 - The organization, after the information system is changed, checks the security functions to verify the functions are operating as intended.
• CCI-002358 - The information system implements a reference monitor for organization-defined access control policies that is always invoked.

Weight

10

Fix Recommendation

The IAO will ensure that the BMC Mainview for z/OS Resource Class(es) is (are) active.

Use the following commands as an example:

RDEFINE CDT class -
CDTINFO( MAXLENGTH(64) DEFAULTUACC(NONE) -
FIRST(ALPHA) CASE(UPPER) -
OTHER(ALPHA,NUMERIC,NATIONAL,SPECIAL) -
POSIT(301) RACLIST(REQUIRED) -
GENERIC(ALLOWED) GENLIST(ALLOWED) -
OPERATIONS(YES) -
) UACC(NONE)

SETROPTS CLASSACT(CDT) RACLIST(CDT)
SETROPTS RACLIST(CDT) REFRESH

SETROPTS GENERIC(class) GENCMD(class)
SETROPTS CLASSACT(class) RACLIST(class)
SETROPTS RACLIST(class) REFRESH

Check Contents

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS)
- DSMON.RPT(RACCDT) - Alternate list of active resource classes

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZMVZ0038)

Ensure that the BMC Mainview for z/OS resource class(es) is (are) defined and active.

Vulnerability Number

V-18011

Documentable

False

Rule Version

ZMVZR038

Severity Override Guidance

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS)
- DSMON.RPT(RACCDT) - Alternate list of active resource classes

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZMVZ0038)

Ensure that the BMC Mainview for z/OS resource class(es) is (are) defined and active.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

2093

Comments