STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

On Classified Systems the Processor Resource/Systems Manager (PR/SM) must not allow access to system complex data.

DISA Rule

SV-256866r958472_rule

Vulnerability Number

V-256866

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

HLP0050

Severity

CAT II

CCI(s)

• CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Have the Systems Administrator or Systems Programmer use the Hardware Management Console, to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions.

Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off.

Check Contents

Have the Systems Administrator or Systems Programmer use the Hardware Management Console; to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions.

Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off.

NOTE: The default is that the Global Performance Data Control option is turned off.

If the PR/SM allows access to system complex data then, this is a FINDING.

Vulnerability Number

V-256866

Documentable

False

Rule Version

HLP0050

Severity Override Guidance

Have the Systems Administrator or Systems Programmer use the Hardware Management Console; to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions.

Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off.

NOTE: The default is that the Global Performance Data Control option is turned off.

If the PR/SM allows access to system complex data then, this is a FINDING.

Check Content Reference

M

Target Key

5533