STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 9 Release: 9 Benchmark Date: 01 Jul 2026:

IBM z/OS DFSMS resource class(es) must be defined to the GSO CLASMAP record in accordance with security requirements.

DISA Rule

SV-223593r1225816_rule

Vulnerability Number

V-223593

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

ACF2-SM-000010

Severity

CAT II

CCI(s)

CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

Fix Recommendation

Define the GSO CLASMAP record with the following definitions:

MGMTCLAS
STORCLAS

Ensure both resource classes above are defined uniquely.

Example:
SHOW SAFDEF

SET CONTROL(GSO)
INSERT CLASMAP.MGMTCLAS RESOURCE(MGMTCLAS) RSRCTYPE(MGM) ENTITYTLN(8)
INSERT CLASMAP.STORCLAS RESOURCE(STORCLAS) RSRCTYPE(STR) ENTITYTLN(8
F ACF2,REFRESH(ALL)

Check Contents

From the ISPF Command Shell enter:
ACF
SET CONTROL(GSO)
SHOW CLASMAP

If both MGMTCLAS and STORCLAS resource classes are uniquely defined (i.e., not type SAF), this is not a finding.

Vulnerability Number

V-223593

Documentable

False

Rule Version

ACF2-SM-000010

Severity Override Guidance

From the ISPF Command Shell enter:
ACF
SET CONTROL(GSO)
SHOW CLASMAP

If both MGMTCLAS and STORCLAS resource classes are uniquely defined (i.e., not type SAF), this is not a finding.

Check Content Reference

Target Key

4100