STIGQter STIGQter: STIG Summary: z/OS TDMF for ACF2 Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

Transparent Data Migration Facility (TDMF) configuration/parameter/option values are not specified properly.

DISA Rule

SV-224347r1144122_rule

Vulnerability Number

V-224347

Group Title

SRG-OS-000018

Rule Version

ZTDM0040

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

The product's systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct.

Refer to the required parameters below:

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Note: The ISSO will ensure that volume resource protection is defined to the ACP and access to volumes is given to the appropriate personnel.

Check Contents

Have the product's systems programmer display the configuration/parameters control statements used in the current running product to define or enable security.

If the following keywords specify the values in the Transparent Data Migration Facility (TDMF) security parameter member, this is not a finding.

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Vulnerability Number

V-224347

Documentable

False

Rule Version

ZTDM0040

Severity Override Guidance

Have the product's systems programmer display the configuration/parameters control statements used in the current running product to define or enable security.

If the following keywords specify the values in the Transparent Data Migration Facility (TDMF) security parameter member, this is not a finding.

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Check Content Reference

M

Target Key

4131