STIGQter: STIG Summary: z/OS BMC MAINVIEW for z/OS for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

BMC MAINVIEW for z/OS configuration/parameter values are not specified properly.

DISA Rule

SV-224429r1144931_rule

Vulnerability Number

V-224429

Group Title

SRG-OS-000018

Rule Version

ZMVZR040

Severity

CAT II

CCI(s)

• CCI-000015 - Support the management of system accounts using (organization-defined automated mechanisms).
• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

The BMC MAINVIEW for z/OS systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct. Set the standard values for the BMC MAINVIEW for z/OS security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below.

Statement(values)
ESMTYPE(AUTO|RACF)

Check Contents

Refer to the Configuration Location data set and member specified in the z/OS Dialog Management Procedures for BMC MAINVIEW for z/OS.

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZMVZ0040).

If the following keywords specify the values in the BMC MAINVIEW for z/OS security parameter member, this is not a finding.

Statement(values)
ESMTYPE(AUTO|RACF)

Vulnerability Number

V-224429

Documentable

False

Rule Version

ZMVZR040

Severity Override Guidance

Refer to the Configuration Location data set and member specified in the z/OS Dialog Management Procedures for BMC MAINVIEW for z/OS.

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZMVZ0040).

If the following keywords specify the values in the BMC MAINVIEW for z/OS security parameter member, this is not a finding.

Statement(values)
ESMTYPE(AUTO|RACF)

Check Content Reference

M

Target Key

4140