STIGQter: STIG Summary: z/OS CL/SuperSession for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

CL/SuperSession profile options are set improperly.

DISA Rule

SV-224461r1144720_rule

Vulnerability Number

V-224461

Group Title

SRG-OS-000018

Rule Version

ZCLS0040

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.
• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

The systems programmer and ISSO will review all session manager security parameters and control options for compliance with the requirements of the z/OS STIG Addendum Required CL/SuperSession Common Profile Options and Required CL/SuperSession Profile Options Tables. Verify that the options are set properly.

Check Contents

The following steps are necessary for reviewing the CL/SuperSession options:

Request online access from the site administrator to view CL/SuperSession parameter settings.
Once access to the CL/SuperSession Main Menu has been obtained, select the option for the ADMINISTRATOR menu.
From the ADMINISTRATOR menu, select the option for the PROFILE SELECTION menu.
From the PROFILE SELECTION menu, select the View GLOBAL Profile option.
After selection of the View GLOBAL Profile option, the Update GLOBAL Profile menu appears. From this menu select the profile to be reviewed:

- To view the Common profile, select: _Common
- To view the SUPERSESSION profile, select: _SupSess

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCLS0040).

Compare the security parameters as specified in the Required CL/SuperSession Common Profile Options and Required CL/SuperSession Profile Options Tables in the z/OS STIG Addendum against the settings in CL/SuperSession.

If all options as specified in the Required CL/SuperSession Common Profile Options and Required CL/SuperSession Profile Options Tables in the z/OS STIG Addendum are in effect, this is not a finding.

Vulnerability Number

V-224461

Documentable

False

Rule Version

ZCLS0040

Severity Override Guidance

The following steps are necessary for reviewing the CL/SuperSession options:

Request online access from the site administrator to view CL/SuperSession parameter settings.
Once access to the CL/SuperSession Main Menu has been obtained, select the option for the ADMINISTRATOR menu.
From the ADMINISTRATOR menu, select the option for the PROFILE SELECTION menu.
From the PROFILE SELECTION menu, select the View GLOBAL Profile option.
After selection of the View GLOBAL Profile option, the Update GLOBAL Profile menu appears. From this menu select the profile to be reviewed:

- To view the Common profile, select: _Common
- To view the SUPERSESSION profile, select: _SupSess

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCLS0040).

Compare the security parameters as specified in the Required CL/SuperSession Common Profile Options and Required CL/SuperSession Profile Options Tables in the z/OS STIG Addendum against the settings in CL/SuperSession.

If all options as specified in the Required CL/SuperSession Common Profile Options and Required CL/SuperSession Profile Options Tables in the z/OS STIG Addendum are in effect, this is not a finding.

Check Content Reference

M

Target Key

4148