|Finding ID||Version||Rule ID||IA Controls||Severity|
|Access to product resources should be restricted to only those individuals responsible for the application connectivity and who have a requirement to access these resources. Improper control of product resources could potentially compromise the operating system, ACP, and customer data.|
|z/OS CSSMTP for TSS STIG||2017-09-15|
|Check Text ( C-3298r1_chk )|
| Refer to the following report produced by the TSS Data Collection: |
Refer to the following report produced by the TSS Data Collection:
Verify that the IBM CSSMTP started task(s) is (are) defined in the TSS STC record.
|Fix Text (F-206r1_fix)|
| The IBM CSSMTP system programmer and the IAO will ensure that a product's started task(s) is (are) properly identified and/or defined to the System ACP. |
A unique ACID must be assigned for the IBM CSSMTP started task(s) thru a corresponding STC table entry.
The following sample set of commands is shown here as a guideline:
TSS ADD(STC) PROCNAME(CSSMTP) ACID(CSSMTP)