CL/SuperSessions Resouce Class must be defined or active in the ACP.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-224467 | ZCLSR038 | SV-224467r1144737_rule | CCI-000336 | medium |
| Description | ||||
| Failure to use a robust ACP to control a product could compromise the integrity and availability of the MVS operating system and user data. | ||||
| STIG | Date | |||
| z/OS CL/SuperSession for RACF Security Technical Implementation Guide | 2025-09-27 | |||
Related Frameworks
1 mapping across 3 frameworks
Related Frameworks
SCF0 mappings
No source states a mapping between these directly.
Also reachable in 3 hops (1) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to
NIST 800-530 mappings
No source states a mapping between these directly.
Also reachable in 2 hops (3) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
- DISA STIG Benchmark (XCCDF)7our copyintersects(normalised)
- DISA STIG Benchmark (XCCDF)7intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
- DISA STIG Benchmark (XCCDF)6our copyintersects(normalised)
- DISA STIG Benchmark (XCCDF)6intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
CCI1 mapping
CCI-000336
1.00
- DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
Details
Check Text (C-224467r1144737_chk)
Refer to the following report produced by the RACF Data Collection:
- RACFCMDS.RPT(SETROPTS).
Automated Analysis (Currently there is no automation for version 3 of CL/SuperSession)
Refer to the following report produced by the RACF Data Collection:
- PDI(ZCLSR038).
If the CL/SuperSession resource class(es) is (are) active, this is not a finding.
Fix Text (F-26132r1144736_fix)
Ensure that the CL/SuperSession Resource Class(es) is (are) active. The SYS3.OMEGAMON.qualifier.RLSPARM(KLKINNAM) member for Version 3 of CL/Supersession or the SYS3.OMEGAMON.qualifier.RLSPARM(KLVINNAM) member for version 2 of CL/Supersession contains a "CLASSES=" entry, this entry identifies the member that contains the "VGWAPLST EXTERNAL=" entry. The "VGWAPLST EXTERNAL=" entry identifies the resource class that is used by CL/SuperSession and this resource class will be active. Current guidance identifies that APPL is the resource class identified in the above location.
Use the following commands as an example:
SETROPTS CLASSACT(APPL)