STIGQter: STIG Summary: IBM z/VM Using CA VM:Secure Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 27 Apr 2018:

The IBM z/VM JOURNALING statement must be coded on the configuration file.

DISA Rule

SV-93613r1_rule

Vulnerability Number

V-78907

Group Title

SRG-OS-000254-GPOS-00095

Rule Version

IBMZ-VM-000810

Severity

CAT II

CCI(s)

• CCI-001464 - The information system initiates session audits at system start-up.

Weight

10

Fix Recommendation

Configure the system configuration “JOURNALING” statement to “JOURNALING ON”.

Check Contents

Examine the Product configuration file.

If the “JOURNALING” statement does not specify “ON”, this is a finding.

Vulnerability Number

V-78907

Documentable

False

Rule Version

IBMZ-VM-000810

Severity Override Guidance

Examine the Product configuration file.

If the “JOURNALING” statement does not specify “ON”, this is a finding.

Check Content Reference

M

Target Key

3211

Comments