III - Administrative Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000279-GPOS-00109
<GroupDescription></GroupDescription>Group -
IBM z/OS must configure system wait times to protect resource availability based on site priorities.
<VulnDiscussion>Automatic session termination addresses the termination of user-initiated logical sessions in contrast to the termination of ...Rule Medium Severity -
SRG-OS-000032-GPOS-00013
<GroupDescription></GroupDescription>Group -
The IBM z/OS BPX.SMF resource must be properly configured.
<VulnDiscussion>Remote access services, such as those providing remote access to network devices and information systems, which lack automate...Rule Medium Severity -
SRG-OS-000392-GPOS-00172
<GroupDescription></GroupDescription>Group -
IBM z/OS SMF recording options for the TN3270 Telnet Server must be properly specified.
<VulnDiscussion>The TN3270 Telnet Server can provide audit data in the form of SMF records. The SMF data produced provides information about ...Rule Medium Severity -
SRG-OS-000001-GPOS-00001
<GroupDescription></GroupDescription>Group -
IBM RACF must be installed and active on the system.
<VulnDiscussion>Enterprise environments make account management for operating systems challenging and complex. A manual process for account m...Rule High Severity -
SRG-OS-000123-GPOS-00064
<GroupDescription></GroupDescription>Group -
The IBM z/OS system administrator (SA) must develop a process to disable emergency accounts after the crisis is resolved or 72 hours.
<VulnDiscussion>Emergency accounts are privileged accounts that are established in response to crisis situations where the need for rapid acc...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.