STIGUI
V-224656CAT II — Medium severitySV-224656r1145883_rule

CL/SuperSession's Resouce Class is not defined or active in the ACP.

Rule version ZCLST038 · STIG v7 · 2025-09-28

Discussion

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

Check

Refer to the following report produced by the TSS Data Collection:

- TSSCMDS.RPT(#RDT).

If the resource class of KLS is defined in the Resource Definition Table (RDT), this is not a finding.

Fix

Add the resource KLS to the TOP SECRET RDT using the following TSS command example:

TSS ADD(RDT) RESCLASS(KLS) RESCODE(xx)

(where xx is an unused hex value)

Identifiers

Group ID
V-224656
Group title
SRG-OS-000309
Rule ID
SV-224656r1145883_rule
Check ID
C-26339r1145881_chk
Fix ID
F-26327r1145882_fix