z/OS ROSCOE for RACF Security Technical Implementation Guide

The z/OS ROSCOE for RACF Security Technical Implementation Guide (V7 R2) has 7 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

7STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V7 · R2

CurrentPublished Wed Oct 01 2025 What changed in V7R2

The Roscoe Resource Class will be defined or active in the ACP.

z/OS ROSCOE for RACF Security Technical Implementation Guide

Assessment Title

Rule Text

The Roscoe Resource Class will be defined or active in the ACP.

Description

Discussion Text

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-224533

Rule

SV-224533r1144978_rule

Severity

medium

Rule Version

ZROSR038

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Refer to the following report produced by the RACF Data Collection:

- RACFCMDS.RPT(SETROPTS).
- DSMON.RPT(RACCDT) - Alternate list of active resource classes.

Automated Analysis
Refer to the following report produced by the RACF Data Collection:

- PDI(ZROS0038).

If the ROSCOE resource class(es) is (are) active, this is not a finding.

Implementation Procedure

Fix Text

The ISSO will ensure that the Product Resource Class(es) is (are) active.

Issue the following commands:

SETR CLASSACT(RO@RES)
SETR GENERIC(RO@RES)

STIG check 6 of 7 in the z/OS ROSCOE for RACF STIG checklist

← Previous · V-224532ROSCOE Started task(s) must be properly defined to the STARTED resource class for RACF.Next · V-224534 →Product configuration/parameter values are not specified properly.