STIGQter: STIG Summary: z/OS IBM System Display and Search Facility (SDSF) for RACF STIG Version: 6 Release: 8 Benchmark Date: 22 Apr 2016:

IBM System Display and Search Facility (SDSF) Resource Class will be active in the RACF.

DISA Rule

SV-40831r2_rule

Vulnerability Number

V-18011

Group Title

ZB000038

Rule Version

ZISFR038

Severity

CAT II

CCI(s)

• CCI-000336 - The organization, after the information system is changed, checks the security functions to verify the functions are operating as intended.
• CCI-002358 - The information system implements a reference monitor for organization-defined access control policies that is always invoked.

Weight

10

Fix Recommendation

The IAO will ensure that the IBM System Display and Search Facility (SDSF) Resource Class(es) is (are) active.

Use the following commands as an example:

SETROPTS CLASSACT(SDSF)

Check Contents

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS)
- DSMON.RPT(RACCDT) - Alternate list of active resource classes

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZISF0038)

If the IBM System Display and Search Facility (SDSF) resource class(es) is (are) active, this is not a finding.

Vulnerability Number

V-18011

Documentable

False

Rule Version

ZISFR038

Severity Override Guidance

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS)
- DSMON.RPT(RACCDT) - Alternate list of active resource classes

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZISF0038)

If the IBM System Display and Search Facility (SDSF) resource class(es) is (are) active, this is not a finding.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

2190

Comments