← Back to IBM zVM Using CA VM:Secure Security Technical Implementation Guide

V-237963

CAT II (Medium)

IBM z/VM must employ a Session manager.

Rule ID

SV-237963r649729_rule

STIG

IBM zVM Using CA VM:Secure Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000366

Discussion

A session manager controls the semi-permanent interactive information interchange, also known as a dialogue, between a user and z/VM. Without the use of a session manager these semi-permanent interchanges can be open to compromise and attacks.

Check Content

Examine running systems.

If access is gained to the z/VM system without going through a session manager, this is a finding.

Fix Text

Ensure that a session manager is in use with the system.