STIGQter: STIG Summary: z/OS TADz for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

Tivoli Asset Discovery for z/OS (TADz) Started Task name(s) must be properly identified/defined to the system ACP.

DISA Rule

SV-224539r1145282_rule

Vulnerability Number

V-224539

Group Title

SRG-OS-000104

Rule Version

ZTADR030

Severity

CAT II

CCI(s)

• CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

10

Fix Recommendation

The Systems Programmer and ISSO will ensure that the started task for TADz is properly defined.

Define the started task for TADz.

Example:

au tadzmon name('stc, tivoli AD') nopass -
dfltgrp(stc) owner(stc) -
data('stc for tivoli asset discovery')

Check Contents

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(LISTUSER).

Verify that the userid(s) for the TADz started task(s) is (are) properly defined. If the following attributes are defined, this is not a finding.

PROTECTED

Vulnerability Number

V-224539

Documentable

False

Rule Version

ZTADR030

Severity Override Guidance

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(LISTUSER).

Verify that the userid(s) for the TADz started task(s) is (are) properly defined. If the following attributes are defined, this is not a finding.

PROTECTED

Check Content Reference

M

Target Key

4163