Skip to content
ATO Pathways
  Log In

IBM z/OS TSS Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The CA-TSS CANCEL Control Option must not be specified.

    <VulnDiscussion>Configuring the operating system to implement organization-wide security implementation guides and security checklists ensure...
    Rule Medium Severity
    Show

  • Data set masking characters allowing access to all data sets must be properly restricted in the CA-TSS security database.

    <VulnDiscussion>To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-ap...
    Rule Medium Severity
    Show

  • SRG-OS-000080-GPOS-00048

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM z/OS DASD Volume access greater than CREATE found in the CA-TSS database must be limited to authorized information technology personnel requiring access to perform their job duties.

    &lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-ap...
    Rule High Severity
    Show

  • SRG-OS-000080-GPOS-00048

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM z/OS Sensitive Utility Controls must be properly defined and protected.

    &lt;VulnDiscussion&gt;To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-ap...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00229

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM z/OS Started tasks must be properly defined to CA-TSS.

    &lt;VulnDiscussion&gt;Started procedures have system generated job statements that do not contain the user, group, or password statements. To enabl...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The number of CA-TSS ACIDs with MISC9 authority must be justified.

    &lt;VulnDiscussion&gt;Configuration settings are the set of parameters that can be changed in hardware, software, or firmware components of the sys...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The CA-TSS LUUPDONCE Control Option value specified must be set to NO.

    &lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists ensure...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The CA-TSS Automatic Data Set Protection (ADSP) Control Option must be set to NO.

    &lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists ensure...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • CA-TSS RECOVER Control Option must be set to ON.

    &lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists ensure...
    Rule Medium Severity
    Show

  • SRG-OS-000096-GPOS-00050

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM z/OS must properly configure CONSOLxx members.

    &lt;VulnDiscussion&gt;In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e....
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules