IBM z/OS ACF2 Security Technical Implementation Guide

The IBM z/OS ACF2 Security Technical Implementation Guide (V9 R10) has 226 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

226STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V9 · R10

CurrentPublished Wed Sep 30 2026

ACF2 APPLDEF GSO record if used must have supporting documentation indicating the reason it was used.

IBM z/OS ACF2 Security Technical Implementation Guide

Assessment Title

Rule Text

ACF2 APPLDEF GSO record if used must have supporting documentation indicating the reason it was used.

Description

Discussion Text

Failure to restrict network connectivity only to authorized systems permits inbound connections from malicious systems. It also permits outbound connections that may facilitate exfiltration of DoW data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-223488

Rule

SV-223488r1268955_rule

Severity

low

Rule Version

ACF2-ES-000700

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the ACF Command screen enter:
SET CONTROL(GSO)
LIST LIKE(APPLDEF-)

If the GSO APPLDEF record does not exist, this is not a finding.

If the GSO APPLDEF record does exist and no supporting documentation is available, this is a finding.

Implementation Procedure

Fix Text

For any APPLDEF GSO record used, it must have supporting documentation indicating the reason it was used.

The APPLDEF record is optional.

STIG check 67 of 226 in the IBM z/OS ACF2 STIG checklist

← Previous · V-223487ACF2 BACKUP GSO record must be defined with a TIME value specifies greater than 00 unless the database is shared and backed up on another system.Next · V-223489 →ACF2 MAINT GSO record value if specified must be restricted to production storage management user.