An error occurred:

IBM z/OS RACF STIG

IBM z/OS RACF Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RACF-SH-000060 V-223811 IBM z/OS, for PKI-based authentication, must use the ICSF or ESM for key management. Cat II
RACF-SL-000010 V-223812 IBM z/OS permission bits and user audit bits for HFS objects that are part of the Syslog daemon component must be properly configured. Cat II
RACF-SL-000020 V-223813 The IBM z/OS Syslog daemon must be started at z/OS initialization. Cat II
RACF-SL-000030 V-223814 The IBM z/OS Syslog daemon must be properly defined and secured. Cat II
RACF-SM-000010 V-223815 IBM z/OS DFSMS Program Resources must be properly defined and protected. Cat II
RACF-SM-000020 V-223816 IBM z/OS DFSMS control data sets must be protected in accordance with security requirements. Cat II
RACF-SM-000030 V-223817 IBM z/OS DFSMS-related RACF classes must be active. Cat II
RACF-SM-000040 V-223818 IBM z/OS DFSMS resources must be protected in accordance with the proper security requirements. Cat II
RACF-SM-000050 V-223819 IBM z/OS using DFSMS must properly specify SYS(x).PARMLIB(IGDSMSxx), SMS parameter settings. Cat II
RACF-SM-000060 V-272879 IBM z/OS DFSMS control data sets must reside on separate storage volumes Cat II
RACF-TC-000010 V-223820 IBM z/OS PROFILE.TCPIP configuration statements for the TCP/IP stack must be coded properly. Cat II
RACF-TC-000020 V-223821 IBM z/OS must be configured to restrict all TCP/IP ports to ports, protocols, and/or services as defined in the PPSM CAL and vulnerability assessments. Cat II
RACF-TC-000030 V-223822 IBM z/OS permission bits and user audit bits for HFS objects that are part of the Base TCP/IP component must be properly configured. Cat II
RACF-TC-000040 V-223823 IBM z/OS TCP/IP resources must be properly protected. Cat II
RACF-TC-000050 V-223824 The IBM RACF SERVAUTH resource class must be active for TCP/IP resources. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.