STIGQter: STIG Summary: z/OS BMC CONTROL-D for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

BMC CONTROL-D configuration/parameter values are not specified properly.

DISA Rule

SV-224388r1144749_rule

Vulnerability Number

V-224388

Group Title

SRG-OS-000018

Rule Version

ZCTD0040

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

The BMC CONTROL-D systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct. Set the standard values for the BMC CONTROL-D security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below.

Keyword Value
DEFMCHKD $$CTDEDM
SECTOLD NO
DFMD01 EXTEND
DFMD04 EXTEND
DFMD08 EXTEND
DFMD19 EXTEND
DFMD23 EXTEND
DFMD24 EXTEND
DFMD26 EXTEND
DFMD27 EXTEND

Check Contents

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTD0040).

If the following keywords specify values in the BMC CONTROL-D security parameter member, this is not a finding.

Keyword Value
DEFMCHKD $$CTDEDM
SECTOLD NO
DFMD01 EXTEND
DFMD04 EXTEND
DFMD08 EXTEND
DFMD19 EXTEND
DFMD23 EXTEND
DFMD24 EXTEND
DFMD26 EXTEND
DFMD27 EXTEND

Vulnerability Number

V-224388

Documentable

False

Rule Version

ZCTD0040

Severity Override Guidance

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTD0040).

If the following keywords specify values in the BMC CONTROL-D security parameter member, this is not a finding.

Keyword Value
DEFMCHKD $$CTDEDM
SECTOLD NO
DFMD01 EXTEND
DFMD04 EXTEND
DFMD08 EXTEND
DFMD19 EXTEND
DFMD23 EXTEND
DFMD24 EXTEND
DFMD26 EXTEND
DFMD27 EXTEND

Check Content Reference

M

Target Key

4135