An error occurred:

IBM z/OS ACF2 STIG

IBM z/OS ACF2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
ACF2-OS-002470 V-223584 ACF2 system administrator must develop a procedure to disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity. Cat II
ACF2-OS-003430 V-223585 IBM z/OS system administrator must develop a procedure to offload SMF files to a different system or media than the system being audited. Cat II
ACF2-SH-000010 V-223586 IBM z/OS SMF recording options for the SSH daemon must be configured to write SMF records for all eligible events. Cat II
ACF2-SH-000030 V-223587 IBM z/OS SSH daemon must be configured with the Department of Defense (DoD) logon banner. Cat II
ACF2-SH-000040 V-223588 IBM z/OS SSH daemon must be configured to only use the SSHv2 protocol. Cat I
ACF2-SH-000050 V-223589 IBM z/OS SSH daemon must be configured to use a FIPS 140-2 compliant cryptographic algorithm. Cat I
ACF2-SL-000010 V-223590 IBM z/OS permission bits and user audit bits for HFS objects that are part of the Syslog daemon component must be configured properly. Cat II
ACF2-SL-000020 V-223591 IBM z/OS Syslog daemon must be started at z/OS initialization. Cat II
ACF2-SL-000030 V-223592 IBM z/OS Syslog daemon must be properly defined and secured. Cat II
ACF2-SM-000010 V-223593 IBM z/OS DFSMS resource class(es) must be defined to the GSO CLASMAP record in accordance with security requirements. Cat II
ACF2-SM-000020 V-223594 IBM z/OS DFSMS Program Resources must be properly defined and protected. Cat II
ACF2-SM-000030 V-223595 IBM z/OS DFSMS control data sets must be protected in accordance with security requirements. Cat II
ACF2-SM-000040 V-223596 IBM z/OS DFMSM resource class(es)must be defined to the GSO SAFDEF record in accordance with security requirements. Cat II
ACF2-SM-000050 V-223597 IBM z/OS DFSMS resources must be protected in accordance with the proper security requirements. Cat II
ACF2-SM-000060 V-223598 IBM z/OS using DFSMS must properly specify SYS(x).PARMLIB(IGDSMSxx), SMS parameter settings. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.