Free DISA STIG and SRG Library | Vaulted

V-24382

On Classified Systems the Processor Resource/Systems Manager (PR/SM) must not allow access to system complex data.

Finding ID
HLP0050
Rule ID
SV-30057r1_rule
Severity
Cat II
CCE
(None)
Group Title
HLP0050
CCI
CCI-000213
Target Key
(None)
Documentable
No
Discussion

Allowing unrestricted access to all Logical Partition data could result in the possibility of unauthorized access and updating of data. This could also impact the integrity of the processing environment.

Fix Text

Have the Systems Administrator or Systems Programmer use the Hardware Management Console, to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions. Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off.

Check Content

Have the Systems Administrator or Systems Programmer use the Hardware Management Console; to verify that the classified Logical Partition system data cannot be viewed by other Logical Partitions. Use the Security Definitions Panel to do this. The Global Performance Data Control option must be turned off. NOTE: The default is that the Global Performance Data Control option is turned off. If the PR/SM allows access to system complex data then, this is a FINDING.

Responsibility

System Administrator

IA Controls

ECCD-1, ECCD-2