IBM System Display and Search Facility (SDSF) Resource Class will be active in the RACF.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-224511 | SRG-OS-000309 | ZISFR038 | SV-224511r1144890_rule | 2025-09-27 | 7 |
Description
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.
ℹ️ Check
Refer to the following report produced by the RACF Data Collection:
- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.
Automated Analysis
Refer to the following report produced by the RACF Data Collection:
- PDI(ZISF0038).
If the IBM System Display and Search Facility (SDSF) resource class(es) is (are) active, this is not a finding.
✔️ Fix
The ISSO will ensure that the IBM SDSF Resource Class(es) is (are) active.
Use the following commands as an example:
SETROPTS CLASSACT(SDSF)