V-223467
SV-223467r991589_rule
CAT II
The EXITS GSO record value must specify the module names of site written ACF2 exit routines.
From: IBM z/OS ACF2 Security Technical Implementation Guide (V9R8)
Description
<VulnDiscussion>Configuring the operating system to implement organization-wide security implementation guides and security checklists ensures compliance with federal standards and establishes a common security baseline across DoD that reflects the most restrictive security posture consistent with operational requirements.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
Check Procedure
From the ACF Command enter:
SET CONTROL(GSO)
LIST LIKE(EXIT-)
If the GSO EXITS record values conform to the following requirements, this is not a finding.
Specifies the module names of site written ACF2 exit routines.
NOTE: The DSNPOST exit is optional and is not required to be specified in the GSO EXITS record. DSNPOST(module) SEVPRE(SEVPRE01) SEVPOST(SEVPST01)
NOTE: No other exits are authorized at this time.
NOTE: Local changes will be documented in writing with supporting documentation.
If there is any deviation from the above requirements in the GSO EXITS record values, this is a finding.
Fix Text
Configure the EXITS GSO value to specify the module names of site written ACF2 exit routines.
Specifies the module names of site written ACF2 exit routines.
NOTE: The DSNPOST exit is optional and is not required to be specified in the GSO EXITS record.
DSNPOST(module) SEVPRE(SEVPRE01) SEVPOST(SEVPST01)
Example:
SET C(GSO)
INSERT EXITS DSNPOST(module) SEVPRE(SEVPRE01) SEVPOST(SEVPST01)
F ACF2,REFRESH(EXITS)
NOTE: No other exits are authorized at this time.
NOTE: Local changes will be justified in writing with supporting documentation.
CCI Reference
CCI-000366- Created
- 2026-04-07 20:08:19
- Last Updated
- 2026-04-07 20:08:19