STIGQter: STIG Summary: IBM zVM Using CA VM:Secure Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 27 Oct 2022:

The IBM z/VM JOURNALING statement must be properly configured.

DISA Rule

SV-237944r859014_rule

Vulnerability Number

V-237944

Group Title

SRG-OS-000329-GPOS-00128

Rule Version

IBMZ-VM-001020

Severity

CAT II

CCI(s)

• CCI-002268 - Defines the systems for which permitted organization-defined attributes are to be established.

Weight

10

Fix Recommendation

Configure the system config "JOURNALING" statement to include the following:

Logon,
Account after 3 attempts,
See IBMZ-VM-000040 for LOCKOUT setting.

Link,
Account after 3 attempts,
Disable after 3 attempts

Check Contents

View system config "JOURNALING" statement.

If the "JOURNALING" statement "LOGON" operand is configured as below, this is not a finding.

Logon,
Account after 3 attempts,
See IBMZ-VM-000040 for LOCKOUT setting.

Link,
Account after 3 attempts,
Disable after 3 attempts

Vulnerability Number

V-237944

Documentable

False

Rule Version

IBMZ-VM-001020

Severity Override Guidance

View system config "JOURNALING" statement.

If the "JOURNALING" statement "LOGON" operand is configured as below, this is not a finding.

Logon,
Account after 3 attempts,
See IBMZ-VM-000040 for LOCKOUT setting.

Link,
Account after 3 attempts,
Disable after 3 attempts

Check Content Reference

M

Target Key

5306