STIGUI
V-224288CAT II — Medium severitySV-224288r1141424_rule

CL/SuperSession APPCLASS member is not configured in accordance with the proper security requirements.

Rule version ZCLSA043 · STIG v7 · 2025-09-27

Discussion

CL/SuperSession configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be weakened. This exposure may threaten the availability of the product applications, and compromise the confidentiality of customer data.

Check

Review the member APPCLASS in the TLVPARM DD statement concatenation of the CL/SuperSession STC procedure. (This member is located in SYS3.OMEGAMON.qualifier.RLSPARM.)

Automated Analysis Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCLS0043).

If the parameters for the member APPCLASS are configured as follows, this is not a finding.

VGWAPLST EXTERNAL=APL

Fix

The systems programmer and ISSO will ensure that the parameter options for member APPCLASS are coded to the below specifications.

Review the member APPCLASS in the TLVPARM DD statement concatenation of the CL/SuperSession STC procedure. (This member is located in SYS3.OMEGAMON.qualifier.RLSPARM.) Ensure all session manager security parameters and control options are in compliance according to the following:

VGWAPLST EXTERNAL=APL

Identifiers

Group ID
V-224288
Group title
SRG-OS-000018
Rule ID
SV-224288r1141424_rule
Check ID
C-25961r1141423_chk
Fix ID
F-25949r1041224_fix