Ensure FTP.DATA configuration statements enforce secure configuration

YüksekDüzey 1Manuel incelemeibm-z

Açıklama

The statements in the FTP.DATA configuration file specify the parameters and values that control the operation of the FTP Server components including the use of anonymous FTP. Several of the parameters must have specific settings to provide a secure configuration. Inappropriate values could result in undesirable operations and degraded security. This exposure may result in unauthorized access impacting data integrity or the availability of some system services.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Request a copy of the FTP server configuration statements in FTP.DATA for any active site FTP server started tasks. Verify that: The ACCESSERRORMSGS statement is omitted or is commented out or or is coded with a value of FALSE The ANONYMOUS statement is omitted or is commented out The BANNER statement is coded The INACTIVE statement is coded with a value between 1 and 900 The PASSIVEDATACONN statement is coded with a value of NOREDIRECT The REPLYSECURITYLEVEL statement is coded with a value of 1 The UMASK statement is coded with a value of 077.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

The site will need to follow their standard change management process for updating FTP server configuration statements in FTP.DATA with compliant values.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: ibm-znetwork
Referans: CIS IBM z/OS with RACF Benchmark v1.0.0 - 6.2.3 Ensure FTP.DATA configuration statements enforce secure configuration