STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.

DISA Rule

SV-256864r958472_rule

Vulnerability Number

V-256864

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

HLP0030

Severity

CAT II

CCI(s)

• CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Review the Security Definition parameters specified under PR/SM, and turn off the Cross Partition Control option.

Check Contents

Using the Hardware Management Console, verify that the Logical Partitions cannot issue control program commands to another Logical Partition. Use the PR/SM panel, known as the Security Definitions Page, to do this. The Cross Partition Control option must be turned off.

NOTE: The default is that the Cross Partition Control option is turned off.

If Processor Resource/Systems Manager (PR/SM) allows unrestricted issuing of control program commands then this is a FINDING

Vulnerability Number

V-256864

Documentable

False

Rule Version

HLP0030

Severity Override Guidance

Using the Hardware Management Console, verify that the Logical Partitions cannot issue control program commands to another Logical Partition. Use the PR/SM panel, known as the Security Definitions Page, to do this. The Cross Partition Control option must be turned off.

NOTE: The default is that the Cross Partition Control option is turned off.

If Processor Resource/Systems Manager (PR/SM) allows unrestricted issuing of control program commands then this is a FINDING

Check Content Reference

M

Target Key

5533