STIGUI
V-224340CAT II — Medium severitySV-224340r1141634_rule

The ROSCOE's Resource Class is not defined or active in the ACP.

Rule version ZROSA038 · STIG v7 · 2025-09-27

Discussion

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

Check

Refer to the following report produced by the ACF2 Data Collection:

- ACF2CMDS.RPT(ACFGSO).

If the following GSO CLASMAP record entry(ies) is (are) defined, this is not a finding.

CLASMAPqual RESOURCE(ROSRES) RSRCTYPE(rosid) ENTITYLN(nn)

Note: The site determines the appropriate three letter RSRCTYPE that is unique for each Roscoe system. The ENTITYLN should be appropriate for the site's installation.

Fix

Use SAF security to define and protect the Products resource class(es).

Ensure that the following GSO CLASMAP record entry(ies) is (are) defined:

CLASMAP.ROSCOE ENTITYLN(nn) RESOURCE(ROSRES) RSRCTYPE(rosid)

Note: The site determines the appropriate three letter RSRCTYPE that is unique for each Roscoe system. The ENTITYLN should be appropriate for the site's installation.

Example:

SET C(GSO) LIST CLASMAP.ROSCOE INSERT CLASMAP.ROSCOE ENTITYLN(39) RESOURCE(ROSRES) RSRCTYPE(ROS)

F ACF2,REFRESH(CLASMAP)

Identifiers

Group ID
V-224340
Group title
SRG-OS-000309
Rule ID
SV-224340r1141634_rule
Check ID
C-26017r1141633_chk
Fix ID
F-26005r868226_fix