STIGQter: STIG Summary: IBM zVM Using CA VM:Secure Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 27 Oct 2022:

CA VM:Secure product AUTOEXP record in the Security Config File must be properly set.

DISA Rule

SV-237912r858960_rule

Vulnerability Number

V-237912

Group Title

SRG-OS-000076-GPOS-00044

Rule Version

IBMZ-VM-000500

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Include an "AUTOEXP" record in the "SECURITY CONFIG" file that is configured as follows:

AUTOEXP 50 60

Check Contents

Examine the "SECURITY CONFIG" file.

If there is no "AUTOEXP" record, this is a finding.

If the "AUTOEXP" record is configured as below, this is not finding.

AUTOEXP 50 60

Vulnerability Number

V-237912

Documentable

False

Rule Version

IBMZ-VM-000500

Severity Override Guidance

Examine the "SECURITY CONFIG" file.

If there is no "AUTOEXP" record, this is a finding.

If the "AUTOEXP" record is configured as below, this is not finding.

AUTOEXP 50 60

Check Content Reference

Target Key

5306