STIGQter: STIG Summary: IBM Hardware Management Console (HMC) STIG Version: 1 Release: 5 Benchmark Date: 20 Jan 2015:

On Classified Systems the Processor Resource/Systems Manager (PR/SM) must not allow access to system complex data.

DISA Rule

SV-30057r2_rule

Vulnerability Number

V-24382

Group Title

HLP0050

Rule Version

HLP0050

Severity

CAT II

CCI(s)

• CCI-000213 - The information system enforces approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Have the Systems Administrator or Systems Programmer use the Hardware Management Console, to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions.

Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off.

Check Contents

Have the Systems Administrator or Systems Programmer use the Hardware Management Console; to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions.

Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off.

NOTE: The default is that the Global Performance Data Control option is turned off.

If the PR/SM allows access to system complex data then, this is a FINDING.

Vulnerability Number

V-24382

Documentable

False

Rule Version

HLP0050

Severity Override Guidance

Have the Systems Administrator or Systems Programmer use the Hardware Management Console; to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions.

Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off.

NOTE: The default is that the Global Performance Data Control option is turned off.

If the PR/SM allows access to system complex data then, this is a FINDING.

Check Content Reference

M

Responsibility

Systems Programmer

Target Key

1891

Comments