Rule version ZCLSR038 · STIG v7 · 2025-09-27
Failure to use a robust ACP to control a product could compromise the integrity and availability of the MVS operating system and user data.
Refer to the following report produced by the RACF Data Collection:
- RACFCMDS.RPT(SETROPTS).
Automated Analysis (Currently there is no automation for version 3 of CL/SuperSession) Refer to the following report produced by the RACF Data Collection:
- PDI(ZCLSR038).
If the CL/SuperSession resource class(es) is (are) active, this is not a finding.
Ensure that the CL/SuperSession Resource Class(es) is (are) active. The SYS3.OMEGAMON.qualifier.RLSPARM(KLKINNAM) member for Version 3 of CL/Supersession or the SYS3.OMEGAMON.qualifier.RLSPARM(KLVINNAM) member for version 2 of CL/Supersession contains a "CLASSES=" entry, this entry identifies the member that contains the "VGWAPLST EXTERNAL=" entry. The "VGWAPLST EXTERNAL=" entry identifies the resource class that is used by CL/SuperSession and this resource class will be active. Current guidance identifies that APPL is the resource class identified in the above location.
Use the following commands as an example:
SETROPTS CLASSACT(APPL)