STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

ACF2 TSOCRT GSO record values must be set to obliterate the logon to ASCII CRT devices.

DISA Rule

SV-223510r533198_rule

Vulnerability Number

V-223510

Group Title

SRG-OS-000079-GPOS-00047

Rule Version

ACF2-ES-000930

Severity

CAT II

CCI(s)

• CCI-000206 - The information system obscures feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

Weight

10

Fix Recommendation

Define a clear string used to obliterate the logon to ASCII CRT devices.

STRING(A12FA11C1A270C0D)

Example:
SET C(GSO)
INSERT TSOCRT STRING(A12FA11C1A270C0D)

F ACF2,REFRESH(TSOCRT)

Check Contents

From the ISPF Command Shell enter:
ACF
SET CONTROL(GSO) <enter>
LIST TSOCRT

If the GSO TSOCRT record values conform to the following requirements, this is not a finding.

STRING(A12FA11C1A270C0D)

Vulnerability Number

V-223510

Documentable

False

Rule Version

ACF2-ES-000930

Severity Override Guidance

From the ISPF Command Shell enter:
ACF
SET CONTROL(GSO) <enter>
LIST TSOCRT

If the GSO TSOCRT record values conform to the following requirements, this is not a finding.

STRING(A12FA11C1A270C0D)

Check Content Reference

M

Target Key

4100

Comments