STIG compliance ACF0410 GSO RESRULE INDEX()

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

STIG compliance Rule Set ACF0410, member C2AGA410

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

The STIG states the following:

The IAO will ensure that the RESRULE GSO value is set to NONE any other setting requires documentation justifying the change.

Ensure the GSO RESRULE record values conform to the following requirements.

None.

Example:

SET C(GSO)

INSERT RESRULE INDEX()

F ACF2,REFRESH(RESRULE)

NOTE: Local changes will be justified in writing with supporting documentation.

Based on the STIG for compliance the GSO RESRULE should be set to: RESRULE INDEX().
Please note that ACF2 documents the purpose of the GSO RESRULE record: 

The RESRULE record defines a set of high-level indexes that identify the access rule sets to be made resident in storage at CA ACF2 initialization time. You can use this function to reduce the I/O operations required by CA ACF2 to obtain heavily used indexes such as SYS1.

Storage utilization is improved when common rules are made globally resident. For example, when 100 users access SYS1 data sets, then 100 copies of the SYS1 rule are in LSQA unless the SYS1 rule is made resident.

Additional Information

Audited by Michael Blaha on 10/05/2023