STIGQter: STIG Summary: z/OS CA 1 Tape Management for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

CA 1 Tape Management Resource Class will be defined or active in the ACP.

DISA Rule

SV-224457r1144686_rule

Vulnerability Number

V-224457

Group Title

SRG-OS-000309

Rule Version

ZCA1R038

Severity

CAT II

CCI(s)

• CCI-000336 - After system changes, verify that the impacted controls are operating as intended, meeting the security requirements for the system.
• CCI-002358 - Implement a reference monitor for organization-defined access control policies that is always invoked.

Weight

10

Fix Recommendation

Ensure that the following CA 1 Tape Management Resource Class(es) is (are) active.

CA@CMD
CA@APE

Use the following commands as an example:

SETROPTS CLASSACT(CA@CMD,CA@APE)

Check Contents

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZCA10038).

If the CA 1 Tape Management resource class(es) is (are) active, this is not a finding.

Vulnerability Number

V-224457

Documentable

False

Rule Version

ZCA1R038

Severity Override Guidance

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZCA10038).

If the CA 1 Tape Management resource class(es) is (are) active, this is not a finding.

Check Content Reference

M

Target Key

4146