An error occurred:

IBM z/OS ACF2 STIG

IBM z/OS ACF2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
ACF2-ES-000640 V-223482 ACF2 LOGONIDs with the NON-CNCL attribute specified in the associated LOGONID record must be listed as trusted and must be specifically approved. Cat II
ACF2-ES-000650 V-223483 ACF2 LOGONIDs with the ACCOUNT, LEADER, or SECURITY attribute must be properly scoped. Cat II
ACF2-ES-000660 V-223484 ACF2 LOGONIDs associated with started tasks that have the MUSASS attribute and the requirement to submit jobs on behalf of its users must have the JOBFROM attribute as required. Cat II
ACF2-ES-000670 V-223485 IBM z/OS Started Tasks must be properly identified and defined to ACF2. Cat II
ACF2-ES-000680 V-223486 ACF2 emergency LOGONIDS with the REFRESH attribute must have the SUSPEND attribute specified. Cat II
ACF2-ES-000690 V-223487 ACF2 BACKUP GSO record must be defined with a TIME value specifies greater than 00 unless the database is shared and backed up on another system. Cat II
ACF2-ES-000700 V-223488 ACF2 APPLDEF GSO record if used must have supporting documentation indicating the reason it was used. Cat III
ACF2-ES-000710 V-223489 ACF2 MAINT GSO record value if specified must be restricted to production storage management user. Cat II
ACF2-ES-000720 V-223490 ACF2 LINKLST GSO record if specified must only contains trusted system data sets. Cat II
ACF2-ES-000730 V-223491 IBM z/OS must properly protect MCS console userid(s). Cat II
ACF2-ES-000740 V-223492 ACF2 BLPPGM GSO record must not be defined. Cat II
ACF2-ES-000750 V-223493 IBM z/OS UID(0) must be properly assigned. Cat I
ACF2-ES-000760 V-223494 IBM z/OS user account for the UNIX kernel (OMVS) must be properly defined to the security database. Cat II
ACF2-ES-000770 V-223495 IBM z/OS user account for the UNIX (RMFGAT) must be properly defined. Cat II
ACF2-ES-000780 V-223496 ACF2 LOGONIDs must be defined with the required fields completed. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.