STIGQter: STIG Summary: IBM z/OS TSS Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

CA-TSS ACID creation must use the EXP option.

DISA Rule

SV-223958r561402_rule

Vulnerability Number

V-223958

Group Title

SRG-OS-000380-GPOS-00165

Rule Version

TSS0-ES-000850

Severity

CAT II

CCI(s)

• CCI-002041 - The information system allows the use of a temporary password for system logons with an immediate change to a permanent password.

Weight

10

Fix Recommendation

Assure procedures to create New Acids include the "EXP" option.

Example:
TSS CREATE(USER02) NAME('ANDY POE')
TYPE(USER)
DEPARTMENT(PAYDEPT)
PASSWORD(INITIAL,60,EXP)
FACILITY(TSO)

Check Contents

Ask the system administrator for the procedures for creating new ACIDs.

If the procedure contains the "EXP" option, this is not a finding.

Vulnerability Number

V-223958

Documentable

False

Rule Version

TSS0-ES-000850

Severity Override Guidance

Ask the system administrator for the procedures for creating new ACIDs.

If the procedure contains the "EXP" option, this is not a finding.

Check Content Reference

M

Target Key

4102

Comments