IBM System Display and Search Facility (SDSF) Configuration parameters must be correctly specified.

An XCCDF Rule

Description

<VulnDiscussion>IBM System Display and Search Facility (SDSF) ISFPARMS defines global options, panel formats, and security for SDSF. Failure to properly specify these parameter values could potentially compromise the integrity and availability of the MVS operating system and user data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-225111r868714_rule
Severity: Medium
References: CCI-000035
Updated: 8 months ago

Ensure  that the following Group function parameters appear and/or do not appear in ISFPARMS.

For each GROUP statement:
AUPDT(0)
AUTH will not be specified
CMDAUTH will not be specifiedCMDLEV will not be specified
DSPAUTH will not be specified
NAME a value will be specified for the NAME

The ISFPARMS GROUP statement defines user groups and their characteristics. Some of these characteristics include access authorization to SDSF functions and commands. Access to these functions and commands will be controlled using SAF resources. The use of the SAF interface is consistent with the DOD requirement to control all products within the operating system using the ACP. To ensure SAF security is always in effect, authorizations to SDSF functions and commands should not be defined in ISFPARMS DD statement in the SDSF JCL member.

IBM System Display and Search Facility (SDSF) Configuration parameters must be correctly specified.

Description

Remediation - Manual Procedure