STIGQter: STIG Summary: z/OS BMC MAINVIEW for z/OS for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

BMC Mainview for z/OS Resource Class will be defined or active in the ACP.

DISA Rule

SV-224428r1144929_rule

Vulnerability Number

V-224428

Group Title

SRG-OS-000309

Rule Version

ZMVZR038

Severity

CAT II

CCI(s)

CCI-000336 - After system changes, verify that the impacted controls are operating as intended, meeting the security requirements for the system.
CCI-002358 - Implement a reference monitor for organization-defined access control policies that is always invoked.

Weight

Fix Recommendation

The ISSO will ensure that the BMC Mainview for z/OS Resource Class(es) is (are) active.

Use the following commands as an example:

RDEFINE CDT class -
CDTINFO( MAXLENGTH(64) DEFAULTUACC(NONE) -
FIRST(ALPHA) CASE(UPPER) -
OTHER(ALPHA,NUMERIC,NATIONAL,SPECIAL) -
POSIT(301) RACLIST(REQUIRED) -
GENERIC(ALLOWED) GENLIST(ALLOWED) -
OPERATIONS(YES) -
) UACC(NONE)

SETROPTS CLASSACT(CDT) RACLIST(CDT)
SETROPTS RACLIST(CDT) REFRESH

SETROPTS GENERIC(class) GENCMD(class)
SETROPTS CLASSACT(class) RACLIST(class)
SETROPTS RACLIST(class) REFRESH

Check Contents

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZMVZ0038).

If the BMC Mainview for z/OS resource class(es) is (are) active, this is not a finding.

BMC Mainview for z/OS Resource Class will be defined or active in the ACP.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key