The ROSCOE's Resource Class is not defined or active in the ACP.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-224340 | SRG-OS-000309 | ZROSA038 | SV-224340r1141634_rule | 2025-09-27 | 7 |
Description
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.
ℹ️ Check
Refer to the following report produced by the ACF2 Data Collection:
- ACF2CMDS.RPT(ACFGSO).
If the following GSO CLASMAP record entry(ies) is (are) defined, this is not a finding.
CLASMAPqual RESOURCE(ROSRES) RSRCTYPE(rosid) ENTITYLN(nn)
Note: The site determines the appropriate three letter RSRCTYPE that is unique for each Roscoe system. The ENTITYLN should be appropriate for the site's installation.
✔️ Fix
Use SAF security to define and protect the Products resource class(es).
Ensure that the following GSO CLASMAP record entry(ies) is (are) defined:
CLASMAP.ROSCOE ENTITYLN(nn) RESOURCE(ROSRES)
RSRCTYPE(rosid)
Note: The site determines the appropriate three letter RSRCTYPE that is unique for each Roscoe system. The ENTITYLN should be appropriate for the site's installation.
Example:
SET C(GSO)
LIST CLASMAP.ROSCOE
INSERT CLASMAP.ROSCOE ENTITYLN(39) RESOURCE(ROSRES) RSRCTYPE(ROS)
F ACF2,REFRESH(CLASMAP)