STIGQter: STIG Summary: z/OS CA MIM for TSS STIG Version: 6 Release: 3 Benchmark Date: 20 Jan 2015:

CA MIM Resource Sharing external security options must be specified properly.

DISA Rule

SV-46150r2_rule

Vulnerability Number

V-18014

Group Title

ZB000040

Rule Version

ZMIM0040

Severity

CAT II

CCI(s)

• CCI-000035 - The information system provides the capability for privileged administrators to configure the organization-defined security policy filters to support different security policies.

Weight

10

Fix Recommendation

The systems programmer/IAO will ensure that the CA MIM Resource Sharing parameter(s) is (are) specified. CA MIM Resource Sharing security interfaces are controlled by parameters coded in the MIMINIT member of the data set(s) specified in the MIMPARMS DD statement of the started task procedures.

Parameter Value
SAFCMDAUTH ON

Check Contents

Refer to the contents of MIMINIT member of the data set(s) specified in the MIMPARMS DD statement of the started task procedures.

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZMIM0040)

Ensure the following CA MIM Resource Sharing parameter(s) is (are) specified in the MIMINIT member of the data set(s) specified in the MIMPARMS DD statement of the started task procedures. If the following guidance is true, this is not a finding.

Parameter Value
SAFCMDAUTH ON

Vulnerability Number

V-18014

Documentable

False

Rule Version

ZMIM0040

Severity Override Guidance

Refer to the contents of MIMINIT member of the data set(s) specified in the MIMPARMS DD statement of the started task procedures.

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZMIM0040)

Ensure the following CA MIM Resource Sharing parameter(s) is (are) specified in the MIMINIT member of the data set(s) specified in the MIMPARMS DD statement of the started task procedures. If the following guidance is true, this is not a finding.

Parameter Value
SAFCMDAUTH ON

Check Content Reference

M

Responsibility

Systems Programmer

Target Key

2379

Comments