← Back to IBM Hardware Management Console (HMC) Security Technical Implementation Guide

V-256865

CAT I (High)

Classified Logical Partition (LPAR) channel paths must be restricted.

Rule ID

SV-256865r958472_rule

STIG

IBM Hardware Management Console (HMC) Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000213

Discussion

Restricted LPAR channel paths are necessary to ensure data integrity. Unrestricted LPAR channel path access could result in a compromise of data integrity. When a classified LPAR exists on a mainframe which requires total isolation, all paths to that LPAR must be restricted.

Check Content

Have the System Administrator or Systems Programmer on classified systems use the Hardware Management Console to verify that the LPAR channel paths are reserved from the rest of the LPARs. 

Use the Security Definitions Panel to verify  this.  The Logical Partition Isolation option must be turned on.

If the Classified LPAR channel paths are not restricted then this is a FINDING.

Fix Text

Have the System Administrator or Systems Programmer for classified systems use the Hardware Management Console to verify that the LPAR channel paths are reserved from the rest of the LPARs. Use the Security Definitions Panel to verify this. The Logical Partition Isolation option must be turned on for classified systems.