← Back to z/OS CL/SuperSession for TSS Security Technical Implementation Guide

V-224656

CAT II (Medium)

CL/SuperSession's Resouce Class is not defined or active in the ACP.

Rule ID

SV-224656r1145883_rule

STIG

z/OS CL/SuperSession for TSS Security Technical Implementation Guide

Version

V7R2

CCIs

CCI-000336 CCI-002358

Discussion

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

Check Content

Refer to the following report produced by the TSS Data Collection:

- TSSCMDS.RPT(#RDT).

If the resource class of KLS is defined in the Resource Definition Table (RDT), this is not a finding.

Fix Text

Add the resource KLS to the TOP SECRET RDT using the following TSS command example:
 
TSS ADD(RDT) RESCLASS(KLS) RESCODE(xx)

(where xx is an unused hex value)