STIGQter: STIG Summary: z/OS TDMF for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

Transparent Data Migration Facility (TDMF) configuration/parameter/option values are not specified properly.

DISA Rule

SV-224541r1145284_rule

Vulnerability Number

V-224541

Group Title

SRG-OS-000018

Rule Version

ZTDM0040

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

The product systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct.

See the required parameters below:

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Note: The ISSO will ensure that volume resource protection is defined to the ACP and access to volumes be given to the appropriate personnel.

Check Contents

Have the products systems programmer display the configuration/parameters control statements used in the current running product to define or enable security.

If the following keywords specify the values in the TDMF security parameter member, this is not a finding.

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Vulnerability Number

V-224541

Documentable

False

Rule Version

ZTDM0040

Severity Override Guidance

Have the products systems programmer display the configuration/parameters control statements used in the current running product to define or enable security.

If the following keywords specify the values in the TDMF security parameter member, this is not a finding.

Parameter Options:
VOLUME SECURITY = YES
CHECK TARGET EMPTY = YES

Session Options:
Volume Security is not available.
CHECKTarget|CHKTarget

Check Content Reference

M

Target Key

4164