STIGUI
V-224254CAT II — Medium severitySV-224254r1141592_rule

BMC Mainview for z/OS Resource Class will be defined or active in the ACP.

Rule version ZMVZA038 · STIG v7 · 2025-09-27

Discussion

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

Check

Refer to the following report produced by the ACF2 Data Collection:

- ACF2CMDS.RPT(ACFGSO).

If the following GSO CLASMAP record entry(ies) is (are) defined, this is not a finding.

CLASMAP.class RESOURCE(class) RSRCTYPE(type) ENTITYLN(nn)

Note: The site determines the appropriate three letter RSRCTYPE that is unique for Mainview. The ENTITYLN should be appropriate for the site's installation.

If the following GSO SAFDEF record entries are defined this not a finding.

INSERT SAFDEF.ssid ID(BBCS) MODE(GLOBAL)REP - RACROUTE(SUBSYS=ssid REQSTOR=-)

Fix

Use SAF security to define and protect the Products resouceresource class(es).

Ensure that the following GSO CLASMAP record entry(ies) is (are) defined:

CLASMAP.class RESOURCE(class) RSRCTYPE(type) ENTITYLN(nn)

Note: The site determines the appropriate three letter RSRCTYPE that is unique for Mainview. The ENTITYLN should be appropriate for the site's installation.

Example:

SET C(GSO) LIST CLASMAP.BMCVIEW INSERT CLASMAP.BMCVIEW ENTITYLN(39) RESOURCE(BMCVIEW) RSRCTYPE(BBM)

F ACF2,REFRESH(CLASMAP)

Ensure that the following GSO SAFDEF record entry(ies) is (are) defined:

SAFDEF.ssid ID(BBCS) MODE(GLOBAL)REP RACROUTE(SUBSYS=ssid REQSTOR=-)

Example:

ACF SET C(GSO) LIST SAFDEF.ssid INSERT SAFDEF.ssid ID(BBCS) MODE(GLOBAL)REP RACROUTE(SUBSYS=ssid REQSTOR=-)

F ACF2,REFRESH(SAFDEF)

Identifiers

Group ID
V-224254
Group title
SRG-OS-000309
Rule ID
SV-224254r1141592_rule
Check ID
C-25927r1141591_chk
Fix ID
F-25915r868211_fix