STIGQter: STIG Summary: IBM z/VM Using CA VM:Secure Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 27 Apr 2018:

The CA VM:Secure LOGONBY command must be restricted to system administrators.

DISA Rule

SV-93637r1_rule

Vulnerability Number

V-78931

Group Title

SRG-OS-000326-GPOS-00126

Rule Version

IBMZ-VM-000990

Severity

CAT II

CCI(s)

• CCI-002233 - The information system prevents organization-defined software from executing at higher privilege levels than users executing the software.

Weight

10

Fix Recommendation

Assure that any “LOGONBY” rules in the CA VM:Secure Rules Facility only specifies users who are system administrators.

Check Contents

Examine the CA VM:Secure Rules facility for “LOGONBY” rules.

If the “LOGONBY” rules specifies users that are not system administrators, this is a finding.

Vulnerability Number

V-78931

Documentable

False

Rule Version

IBMZ-VM-000990

Severity Override Guidance

Examine the CA VM:Secure Rules facility for “LOGONBY” rules.

If the “LOGONBY” rules specifies users that are not system administrators, this is a finding.

Check Content Reference

M

Target Key

3211

Comments