An error occurred:
Close sidebar
Xylok
Home Menu
info@xylok.io
© 2026
Xylok, LLC
Version: releases-v2026.03.1 - rmfrev5
Xylok
Home Menu
info@xylok.io
© 2026
Xylok, LLC
Version: releases-v2026.03.1 - rmfrev5
Open sidebar
Navigate
Top
Search
Checks (
224
)
Print
Changes
Pages (
3/15
)
IBM z/OS RACF STIG
IBM z/OS RACF Security Technical Implementation Guide
v9 r7 (Released Jan. 5, 2026)
v9 r6 (Released Oct. 1, 2025)
v9 r5 (Released July 2, 2025)
v9 r4 (Released April 2, 2025)
v9 r3 (Released Jan. 30, 2025)
v9 r2 (Released Oct. 24, 2024)
v9 r1 (Released July 24, 2024)
v8 r14 (Released April 24, 2024)
v8 r13 (Released Jan. 24, 2024)
v8 r12 (Released July 26, 2023)
v8 r11 (Released April 27, 2023)
v8 r10 (Released Jan. 26, 2023)
v8 r9 (Released Nov. 23, 2022)
v8 r8 (Released Oct. 26, 2022)
v8 r7 (Released April 27, 2022)
v8 r6 (Released Jan. 27, 2022)
v8 r5 (Released Oct. 27, 2021)
v8 r4 (Released July 23, 2021)
v8 r3 (Released April 23, 2021)
v8 r2 (Released Jan. 22, 2021)
v8 r1 (Released Oct. 23, 2020)
v7 r3 (Released July 24, 2020)
v7 r2 (Released April 24, 2020)
v7 r1 (Released Nov. 18, 2019)
v7 r0.1 (Released April 5, 2019)
ID
Vuln ID
Title
Cat
Status
RACF-ES-000280
V-223676
IBM RACF must limit Write or greater access to SYS1.LPALIB to system programmers only.
Cat I
RACF-ES-000290
V-223677
IBM z/OS libraries included in the system REXXLIB concatenation must be properly protected.
Cat I
RACF-ES-000300
V-223678
IBM RACF must limit write or greater access to all LPA libraries to system programmers only.
Cat I
RACF-ES-000310
V-223679
IBM RACF must limit Write or greater access to libraries containing EXIT modules to system programmers only.
Cat I
RACF-ES-000320
V-223680
IBM RACF must limit WRITE or greater access to all system-level product installation libraries to system programmers.
Cat II
RACF-ES-000330
V-223681
IBM RACF must limit access to SYSTEM DUMP data sets to system programmers only.
Cat II
RACF-ES-000340
V-223682
IBM RACF must limit WRITE or greater access to all APF-authorized libraries to system programmers only.
Cat I
RACF-ES-000350
V-223683
IBM RACF access to SYS1.LINKLIB must be properly protected.
Cat II
RACF-ES-000360
V-223684
The IBM RACF System REXX IRRPWREX security data set must be properly protected.
Cat I
RACF-ES-000365
V-230209
The IBM RACF System REXX IRRPHREX security data set must be properly protected.
Cat II
RACF-ES-000370
V-223685
IBM RACF security data sets and/or databases must be properly protected.
Cat I
RACF-ES-000380
V-223686
IBM RACF must limit access to data sets used to back up and/or dump SMF collection files to appropriate users and/or batch jobs that perform SMF dump processing.
Cat II
RACF-ES-000390
V-223687
IBM RACF must limit all system PROCLIB data sets to system programmers only.
Cat I
RACF-ES-000400
V-223688
IBM RACF must limit access to System page data sets (i.e., PLPA, COMMON, and LOCALx) to system programmers.
Cat II
RACF-ES-000410
V-223689
IBM z/OS MCS consoles access authorization(s) for CONSOLE resource(s) must be properly protected.
Cat II
Prev
1
2
3
4
5
6
7
...15
Next
Print
Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.
Version Changes
If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.