STIGQter: STIG Summary: z/OS CL/SuperSession for TSS Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

CL/SuperSession's Resouce Class is not defined or active in the ACP.

DISA Rule

SV-224656r1145883_rule

Vulnerability Number

V-224656

Group Title

SRG-OS-000309

Rule Version

ZCLST038

Severity

CAT II

CCI(s)

CCI-000336 - After system changes, verify that the impacted controls are operating as intended, meeting the security requirements for the system.
CCI-002358 - Implement a reference monitor for organization-defined access control policies that is always invoked.

Weight

Fix Recommendation

Add the resource KLS to the TOP SECRET RDT using the following TSS command example:

TSS ADD(RDT) RESCLASS(KLS) RESCODE(xx)

(where xx is an unused hex value)

Check Contents

Refer to the following report produced by the TSS Data Collection:

- TSSCMDS.RPT(#RDT).

If the resource class of KLS is defined in the Resource Definition Table (RDT), this is not a finding.

Vulnerability Number

V-224656

Documentable

False

Rule Version

ZCLST038

Severity Override Guidance

Refer to the following report produced by the TSS Data Collection:

- TSSCMDS.RPT(#RDT).

If the resource class of KLS is defined in the Resource Definition Table (RDT), this is not a finding.

Check Content Reference

Target Key

4181