STIGQter: STIG Summary: z/OS IBM System Display and Search Facility (SDSF) for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

IBM System Display and Search Facility (SDSF) Resource Class will be active in the RACF.

DISA Rule

SV-224511r1144890_rule

Vulnerability Number

V-224511

Group Title

SRG-OS-000309

Rule Version

ZISFR038

Severity

CAT II

CCI(s)

• CCI-000336 - After system changes, verify that the impacted controls are operating as intended, meeting the security requirements for the system.
• CCI-002358 - Implement a reference monitor for organization-defined access control policies that is always invoked.

Weight

10

Fix Recommendation

The ISSO will ensure that the IBM SDSF Resource Class(es) is (are) active.

Use the following commands as an example:

SETROPTS CLASSACT(SDSF)

Check Contents

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZISF0038).

If the IBM System Display and Search Facility (SDSF) resource class(es) is (are) active, this is not a finding.

Vulnerability Number

V-224511

Documentable

False

Rule Version

ZISFR038

Severity Override Guidance

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZISF0038).

If the IBM System Display and Search Facility (SDSF) resource class(es) is (are) active, this is not a finding.

Check Content Reference

M

Target Key

4157