An error occurred:

IBM z/OS ACF2 STIG

IBM z/OS ACF2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
ACF2-CE-000010 V-223419 IBM z/OS Certificate Name Filtering must be implemented with appropriate authorization and documentation. Cat II
ACF2-CE-000020 V-223420 IBM z/OS must not use Expired Digital Certificates. Cat II
ACF2-CE-000030 V-223421 All IBM z/OS digital certificates in use must have a valid path to a trusted Certification authority. Cat II
ACF2-ES-000010 V-223422 CA-ACF2 OPTS GSO record must be set to ABORT mode. Cat I
ACF2-ES-000020 V-223423 The number of ACF2 users granted the special privilege PPGM must be justified. Cat II
ACF2-ES-000030 V-223424 The number of ACF2 users granted the special privilege OPERATOR must be kept to a strictly controlled minimum. Cat III
ACF2-ES-000040 V-223425 The number of ACF2 users granted the special privilege CONSOLE must be justified. Cat III
ACF2-ES-000050 V-223426 The number of ACF2 users granted the special privilege ALLCMDS must be justified. Cat II
ACF2-ES-000060 V-223427 IBM z/OS system commands must be properly protected. Cat II
ACF2-ES-000070 V-223428 IBM z/OS Sensitive Utility Controls must be properly defined and protected. Cat II
ACF2-ES-000080 V-223429 CA-ACF2 NJE GSO record value must indicate validation options that apply to jobs submitted through a network job entry subsystem (JES2, JES3, RSCS). Cat II
ACF2-ES-000090 V-223430 CA-ACF2 must protect Memory and privileged program dumps in accordance with proper security requirements. Cat II
ACF2-ES-000100 V-223431 CA-ACF2 must properly define users that have access to the CONSOLE resource in the TSOAUTH resource class. Cat II
ACF2-ES-000120 V-223433 CA-ACF2 must limit access to SYSTEM DUMP data sets to appropriate authorized users. Cat II
ACF2-ES-000130 V-223434 CA-ACF2 must limit access to SYS(x).TRACE to system programmers only. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.