An error occurred:

IBM z/OS RACF STIG

IBM z/OS RACF Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RACF-CE-000010 V-223646 Certificate Name Filtering must be implemented with appropriate authorization and documentation. Cat II
RACF-CE-000020 V-223647 Expired digital certificates must not be used. Cat II
RACF-CE-000030 V-223648 All digital certificates in use must have a valid path to a trusted certification authority (CA). Cat II
RACF-ES-000010 V-223649 IBM RACF must limit Write or greater access to SYS1.NUCLEUS to system programmers only. Cat I
RACF-ES-000020 V-223650 IBM RACF must limit Write or greater access to libraries that contain PPT modules to system programmers only. Cat III
RACF-ES-000030 V-235033 IBM RACF must limit WRITE or greater access to LINKLIST libraries to system programmers only. Cat II
RACF-ES-000040 V-223652 IBM RACF emergency USERIDs must be properly defined. Cat II
RACF-ES-000050 V-223653 IBM RACF SETROPTS LOGOPTIONS must be properly configured. Cat II
RACF-ES-000060 V-223654 IBM RACF must protect memory and privileged program dumps in accordance with proper security requirements. Cat II
RACF-ES-000070 V-223655 IBM z/OS system commands must be properly protected. Cat II
RACF-ES-000080 V-223656 IBM RACF must properly define users that have access to the CONSOLE resource in the TSOAUTH resource class. Cat II
RACF-ES-000090 V-223657 The IBM RACF FACILITY resource class must be active. Cat II
RACF-ES-000100 V-223658 The IBM RACF OPERCMDS resource class must be active. Cat II
RACF-ES-000110 V-223659 The IBM RACF MCS consoles resource class must be active. Cat II
RACF-ES-000120 V-223660 IBM RACF CLASSACT SETROPTS must be specified for the TEMPDSN class. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.