CL/SuperSession's Resouce Class is not defined or active in the ACP.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-224656	ZCLST038	SV-224656r1145883_rule	CCI-000336	medium
Description
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.
STIG			Date
z/OS CL/SuperSession for TSS Security Technical Implementation Guide			2025-09-28

Related Frameworks

1 mapping across 3 frameworks

SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IAO-06Technical Verification

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to

NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (3) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-25Reference Monitor

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA STIG Benchmark (XCCDF)7our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)7intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CM-4(2)Verification of Controls

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CM-6Configuration Settings

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA STIG Benchmark (XCCDF)6our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)6intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CCI1 mapping

CCI-000336

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)

Details

Check Text (C-224656r1145883_chk)

Refer to the following report produced by the TSS Data Collection: - TSSCMDS.RPT(#RDT). If the resource class of KLS is defined in the Resource Definition Table (RDT), this is not a finding.

Fix Text (F-26327r1145882_fix)

Add the resource KLS to the TOP SECRET RDT using the following TSS command example: TSS ADD(RDT) RESCLASS(KLS) RESCODE(xx) (where xx is an unused hex value)