STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

ACF2 BACKUP GSO record must be defined with a TIME value specifies greater than 00 unless the database is shared and backed up on another system.

DISA Rule

SV-223487r533198_rule

Vulnerability Number

V-223487

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

ACF2-ES-000690

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000537 - The organization conducts backups of system-level information contained in the information system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Configure the BACKUP GSO value to specify a time field and Time(00:00 ) is not specified unless the database is shared and backed up on another system.

CPUID() PRISPACE(5) SECSPACE(5) STRING(S ACFBKUP) TIME(00:01) WORKUNIT(VIO)

Example:
SET C(GSO)
INSERT BACKUP CPUID() PRISPACE(5) SECSPACE(5) STRING(S ACFBKUP) TIME(00:01) WORKUNIT(VIO)

F ACF2,REFRESH(BACKUP)

Check Contents

From the ACF command screen enter:
SET CONTROL(GSO)
LIST LIKE(BACKUP-)

If the GSO BACKUP record values conform to the following requirements, this is not a finding.

Example:
CPUID() PRISPACE(5) SECSPACE(5) STRING(S ACFBKUP) TIME(00:01) WORKUNIT(VIO)

If there is any deviation from the above requirements in the GSO BACKUP record values, this is a finding.

Vulnerability Number

V-223487

Documentable

False

Rule Version

ACF2-ES-000690

Severity Override Guidance

From the ACF command screen enter:
SET CONTROL(GSO)
LIST LIKE(BACKUP-)

If the GSO BACKUP record values conform to the following requirements, this is not a finding.

Example:
CPUID() PRISPACE(5) SECSPACE(5) STRING(S ACFBKUP) TIME(00:01) WORKUNIT(VIO)

If there is any deviation from the above requirements in the GSO BACKUP record values, this is a finding.

Check Content Reference

M

Target Key

4100

Comments