STIGQter: STIG Summary: IBM z/VM Using CA VM:Secure Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 27 Apr 2018:

The IBM z/VM JOURNALING LOGON parameter must be set for lockout after 3 attempts for 15 minutes.

DISA Rule

SV-93553r2_rule

Vulnerability Number

V-78847

Group Title

SRG-OS-000021-GPOS-00005

Rule Version

IBMZ-VM-000040

Severity

CAT II

CCI(s)

• CCI-000044 - The information system enforces the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

10

Fix Recommendation

Configure the System Configuration “JOURNALING” statement to:

Facility ON
LOGON
Lockout after 3 attempts for 15 minutes or 0 if system administrator action is desired.

Check Contents

Display the System Configuration File.

If the “JOURNALING” statement is set to:

Facility ON
LOGON
Lockout after 3 attempts for 15 minutes, this is not a finding.
Note: Site may set Lockout value at 0, this will require system administrator action for reset.


Issue "QUERY JOURNAL" command.

If the response is as follows this is not a finding:

Journal: LOGON-on

Vulnerability Number

V-78847

Documentable

False

Rule Version

IBMZ-VM-000040

Severity Override Guidance

Display the System Configuration File.

If the “JOURNALING” statement is set to:

Facility ON
LOGON
Lockout after 3 attempts for 15 minutes, this is not a finding.
Note: Site may set Lockout value at 0, this will require system administrator action for reset.


Issue "QUERY JOURNAL" command.

If the response is as follows this is not a finding:

Journal: LOGON-on

Check Content Reference

M

Target Key

3211

Comments