BMC Mainview for z/OS Resource Class must be defined or active in the ACP.

From z/OS BMC MAINVIEW for z/OS for TSS STIG

Associated with IA controls: DCCS-1, DCCS-2

SV-33846r2_rule BMC Mainview for z/OS Resource Class must be defined or active in the ACP.

Vulnerability discussion

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

Check content

Refer to the following report produced by the ACP Data Collection: - TSSCMDS.RPT(#RDT) If the BMC Mainview for z/OS Resource Class(es) is (are) defined in the Resource Definition Table (RDT) as follows, this is not a finding. RESOURCE CLASS = class RESOURCE CODE = X'hex code' ATTRIBUTE = MASK|NOMASK,MAXOWN(08),MAXPERMIT(044),ACCESS,DEFPROT ACCESS = NONE(0000),CONTROL(0400),UPDATE(6000),READ(4000) ACCESS = WRITE(2000),ALL(FFFF) DEFACC = READ

Fix text

The IAO will ensure the BMC Mainview for z/OS resource class(es) is (are) defined in the TSS RDT. (Note: The RESCLASS and/or RESCODE identified below are examples of a possible installation. The actual RESCLASS and/or RESCODE values are determined when the product is actually installed on a system through the product’s installation guide and can be site specific.) Use the following commands as an example: TSS ADDTO(RDT) RESCLASS(BMCVIEW) - RESCODE(3B) DEFACC(READ) - ATTR(MASK|NOMASK,DEFPROT,LONG,GENERIC) - ACLST(NONE,READ,UPDATE,ALL)

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.