← Back to z/OS IBM System Display and Search Facility (SDSF) for RACF Security Technical Implementation Guide

V-224511

CAT II (Medium)

IBM System Display and Search Facility (SDSF) Resource Class will be active in the RACF.

Rule ID

SV-224511r1144890_rule

STIG

z/OS IBM System Display and Search Facility (SDSF) for RACF Security Technical Implementation Guide

Version

V7R2

CCIs

CCI-000336 CCI-002358

Discussion

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

Check Content

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZISF0038).

If the IBM System Display and Search Facility (SDSF) resource class(es) is (are) active, this is not a finding.

Fix Text

The ISSO will ensure that the IBM SDSF Resource Class(es) is (are) active.

Use the following commands as an example:

SETROPTS CLASSACT(SDSF)