z/OS CL/SuperSession for TSS Security Technical Implementation Guide

The z/OS CL/SuperSession for TSS Security Technical Implementation Guide (V7 R2) has 10 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

10STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V7 · R2

CurrentPublished Wed Oct 01 2025 What changed in V7R2

CL/SuperSession's Resouce Class is not defined or active in the ACP.

z/OS CL/SuperSession for TSS Security Technical Implementation Guide

Assessment Title

Rule Text

CL/SuperSession's Resouce Class is not defined or active in the ACP.

Description

Discussion Text

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-224656

Rule

SV-224656r1145883_rule

Severity

medium

Rule Version

ZCLST038

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Refer to the following report produced by the TSS Data Collection:

- TSSCMDS.RPT(#RDT).

If the resource class of KLS is defined in the Resource Definition Table (RDT), this is not a finding.

Implementation Procedure

Fix Text

Add the resource KLS to the TOP SECRET RDT using the following TSS command example:
 
TSS ADD(RDT) RESCLASS(KLS) RESCODE(xx)

(where xx is an unused hex value)

STIG check 8 of 10 in the z/OS CL/SuperSession for TSS STIG checklist

← Previous · V-224655CL/SuperSession is not properly defined to the Facility Matrix Table for Top Secret.Next · V-224657 →CL/SuperSession KLVINNAM member must be configured in accordance with security requirements.