Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.

From IBM Hardware Management Console (HMC) STIG

Associated with IA controls: ECCD-2, ECCD-1

Associated with: CCI-000226

SV-30055r2_rule Processor Resource/Systems Manager (PR/SM) must not allow unrestricted issuing of control program commands.

Vulnerability discussion

Unrestricted control over the issuing of system commands by a Logical Partition could result in unauthorized data access and inadvertent updates. This could result in severe damage to system resources.

Check content

Using the Hardware Management Console, verify that the Logical Partitions cannot issue control program commands to another Logical Partition. Use the PR/SM panel, known as the Security Definitions Page, to do this. The Cross Partition Control option must be turned off. NOTE: The default is that the Cross Partition Control option is turned off. If Processor Resource/Systems Manager (PR/SM) allows unrestricted issuing of control program commands then this is a FINDING

Fix text

Review the Security Definition parameters specified under PR/SM, and turn off the Cross Partition Control option.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.