Central processors must be restricted for classified/restricted Logical Partitions (LPARs).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-256867 | HLP0060 | SV-256867r958472_rule | CCI-000213 | high |
| Description | ||||
| Allowing unrestricted access to classified processors for all LPARs could cause the corruption and loss of classified data sets, which could compromise classified processing. | ||||
| STIG | Date | |||
| IBM Hardware Management Console (HMC) Security Technical Implementation Guide | 2024-06-24 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
AC-3
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.1.1
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.1.2
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000213
1.00
- DISA · V2R1 · disa_xccdf · related
Details
Check Text (C-256867r958472_chk)
Have the system administrator or systems programmer use the Hardware Management Console; to verify that the LPAR processors are dedicated for exclusive use by classified LPARs.
Use the Processor Page to do this. The Dedicated Central Processors option must be turned on.
If Central processors are not restricted for classified/restricted LPARs, this is a FINDING.
Fix Text (F-60485r890946_fix)
Review the Processor Page under PR/SM and turn on the Dedicated Central Processor option for classified or restricted LPARs. For unclassified LPARs, this option should not be turned on, unless determined by the site.