Skip to content

Resouce Class ROSRES is not defined or active in the ACP.

An XCCDF Rule

Description

<VulnDiscussion>Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID
SV-225604r987853_rule
Severity
Medium
References
Updated



Remediation - Manual Procedure

The IAO will ensure the Product resource class(es) is (are) defined in the TSS RDT.  The IAO will issue one of the following commands to define the Product resource class(es):

TSS REPLACE(RDT) RESCLASS(ROSRES) -
  MAXLEN(044) -
  ATTR(MASK|NOMASK,DEFPROT) -
  ACLST(NONE(0000),CONTROL(0400),UPDATE(6000),READ(4000),WRITE(2000),ALL(FFFF)) -