STIGQter STIGQter: STIG Summary: z/OS CA MIM for ACF2 Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

CA MIM Resource Sharing installation datasets will be properly protected.

DISA Rule

SV-224275r1141570_rule

Vulnerability Number

V-224275

Group Title

SRG-OS-000080

Rule Version

ZMIMA000

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

The ISSO will ensure that WRITE and/or greater access to CA MIM Resource Sharing installation datasets is limited to systems programmers only, and all WRITE and/or greater access is logged. READ access can be given to all authorized users. All failures and successful WRITE and/or greater accesses are logged.

The installing systems programmer will identify and document the product datasets, categorize them according to who will have WRITE and/or greater access, and if required, ensure that all WRITE and/or greater access is logged. The installing systems programmer will identify if any additional groups have WRITE and/or greater access for specific datasets, and once documented, will work with the ISSO to ensure they are properly restricted to the Access Control Program (ACP) active on the system.

(Note: The datasets and/or dataset prefixes identified below are examples of a possible installation. The actual datasets and/or prefixes are determined when the product is installed on a system through the product's installation guide and can be site specific.)

Datasets to be protected will be:
SYS2.MIMGR
SYS3.MIMGR (Datasets that are not altered by product STCs can be more specific.)

The following commands are provided as a sample for implementing dataset controls:

$KEY(SYS2)
MIMGR.- UID(<syspaudt>) R(A) W(L) A(L) E(A)
MIMGR.- UID(<tstcaudt>) R(A) W(L) A(L) E(A)
MIMGR.- UID(<audtaudt>) R(A) E(A)
MIMGR.- UID(authorized users) R(A) E(A)
MIMGR.- UID(<audtaudt>) R(A) E(A)
MIMGR.- UID(CA MIM STCs) R(A) E(A)

$KEY(SYS3)
MIMGR.- UID(<syspaudt>) R(A) W(L) A(L) E(A)
MIMGR.- UID(<tstcaudt>) R(A) W(L) A(L) E(A)
MIMGR.- UID(<audtaudt>) R(A) E(A)
MIMGR.- UID(authorized users) R(A) E(A)
MIMGR.- UID(CA MIM STCs) R(A) E(A)

Check Contents

Refer to the following report produced by the dataset and Resource Data Collection:

- SENSITVE.RPT(MIMRPT).

Automated Analysis
Refer to the following report produced by the dataset and Resource Data Collection:

- PDI(ZMIM0000).

Verify that the accesses to the CA MIM Resource Sharing installation datasets are properly restricted. If the following guidance is true, this is not a finding.

The ACF2 dataset access authorizations restrict READ access to all authorized users.

The ACF2 dataset access authorizations restrict WRITE and/or greater access to systems programming personnel.

The ACF2 dataset access authorizations specify that all (i.e., failures and successes) WRITE and/or greater access is logged.

Vulnerability Number

V-224275

Documentable

False

Rule Version

ZMIMA000

Severity Override Guidance

Refer to the following report produced by the dataset and Resource Data Collection:

- SENSITVE.RPT(MIMRPT).

Automated Analysis
Refer to the following report produced by the dataset and Resource Data Collection:

- PDI(ZMIM0000).

Verify that the accesses to the CA MIM Resource Sharing installation datasets are properly restricted. If the following guidance is true, this is not a finding.

The ACF2 dataset access authorizations restrict READ access to all authorized users.

The ACF2 dataset access authorizations restrict WRITE and/or greater access to systems programming personnel.

The ACF2 dataset access authorizations specify that all (i.e., failures and successes) WRITE and/or greater access is logged.

Check Content Reference

M

Target Key

4115