IBM z/OS RACF STIG

IBM z/OS RACF Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
RACF-ES-000600	V-223707	The IBM RACF TAPEDSN SETROPTS value specified must be properly set.	Cat II
RACF-ES-000610	V-223708	The IBM RACF WHEN(PROGRAM) SETROPTS value specified must be active.	Cat II
RACF-ES-000620	V-223709	IBM RACF use of the AUDITOR privilege must be justified.	Cat II
RACF-ES-000630	V-223710	The IBM RACF database must be on a separate physical volume from its backup and recovery datasets.	Cat II
RACF-ES-000640	V-223711	The IBM RACF database must be backed up on a scheduled basis.	Cat II
RACF-ES-000650	V-223712	IBM z/OS Batch job user IDs must be properly defined.	Cat II
RACF-ES-000660	V-223713	IBM RACF use of the RACF SPECIAL Attribute must be justified.	Cat II
RACF-ES-000670	V-223714	IBM RACF assignment of the RACF OPERATIONS attribute to individual userids must be fully justified.	Cat II
RACF-ES-000680	V-223715	IBM z/OS must properly configure CONSOLxx members.	Cat II
RACF-ES-000690	V-223716	IBM z/OS must properly protect MCS console userid(s).	Cat II
RACF-ES-000700	V-223717	IBM RACF users must have the required default fields.	Cat II
RACF-ES-000710	V-223718	IBM interactive USERIDs defined to RACF must have the required fields completed.	Cat II
RACF-ES-000720	V-223719	IBM z/OS Started Tasks must be properly identified and defined to RACF.	Cat II
RACF-ES-000740	V-223721	The IBM RACF Automatic Data Set Protection (ADSP) SETROPTS value must be set to NOADSP.	Cat II
RACF-ES-000750	V-223722	IBM RACF user accounts must uniquely identify system users.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.