Skip to content

IBM z/OS RACF Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • IBM z/OS must properly configure CONSOLxx members.

    <VulnDiscussion>In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e....
    Rule Medium Severity
  • SRG-OS-000096-GPOS-00050

    <GroupDescription></GroupDescription>
    Group
  • SRG-OS-000077-GPOS-00045

    <GroupDescription></GroupDescription>
    Group
  • IBM z/OS must properly protect MCS console userid(s).

    &lt;VulnDiscussion&gt;In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e....
    Rule Medium Severity
  • SRG-OS-000104-GPOS-00051

    <GroupDescription></GroupDescription>
    Group
  • IBM RACF users must have the required default fields.

    &lt;VulnDiscussion&gt;Ensure that Every USERID is uniquely identified to the system. Within the USERID record, the user's name, default group, the ...
    Rule Medium Severity
  • SRG-OS-000104-GPOS-00051

    <GroupDescription></GroupDescription>
    Group
  • IBM interactive USERIDs defined to RACF must have the required fields completed.

    &lt;VulnDiscussion&gt;Interactive users are considered to be users of CICS, IMS, TSO/E, NetView, or other products that support logging on at a ter...
    Rule Medium Severity
  • SRG-OS-000104-GPOS-00051

    <GroupDescription></GroupDescription>
    Group
  • IBM z/OS Started Tasks must be properly identified and defined to RACF.

    &lt;VulnDiscussion&gt;Started procedures have system generated job statements that do not contain the user, group, or password statements. To enabl...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules