An error occurred:

IBM z/OS ACF2 STIG

IBM z/OS ACF2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
ACF2-ES-000950 V-223512 ACF2 SECVOLS GSO record value must be set to VOLMASK(). Any local changes are justified and documented with the ISSO. Cat II
ACF2-ES-000960 V-223513 ACF2 RESVOLS GSO record value must be set to Volmask(-). Any other setting requires documentation justifying the change. Cat II
ACF2-ES-000970 V-223514 ACF2 security data sets and/or databases must be properly protected. Cat I
ACF2-ES-000980 V-223515 ACF2 AUTOERAS GSO record value must be set to indicate that ACF2 is controlling the automatic physical erasure of VSAM or non VSAM data sets. Cat II
ACF2-ES-000990 V-252705 IBM z/OS must enforce a minimum eight character password length. Cat II
ACF2-FT-000010 V-223517 IBM z/OS SMF recording options for the FTP Server must be configured to write SMF records for all eligible events. Cat II
ACF2-FT-000020 V-223518 IBM z/OS data sets for the FTP Server must be properly protected. Cat II
ACF2-FT-000030 V-223519 IBM z/OS permission bits and user audit bits for HFS objects that are part of the FTP Server component must be properly configured. Cat II
ACF2-FT-000040 V-223520 IBM z/OS FTP.DATA configuration statements must have a proper BANNER statement with the Standard Mandatory DoD Notice and Consent Banner. Cat II
ACF2-FT-000060 V-223522 IBM z/OS FTP.DATA configuration statements for the FTP Server must specify the BANNER statement. Cat II
ACF2-FT-000070 V-223523 IBM z/OS FTP Control cards must be properly stored in a secure PDS file. Cat II
ACF2-FT-000080 V-223524 The IBM z/OS TFTP Server program must be properly protected. Cat II
ACF2-FT-000090 V-223525 IBM z/OS FTP Server daemon must be defined with proper security parameters. Cat II
ACF2-FT-000100 V-223526 IBM z/OS startup parameters for the FTP Server must be defined in the SYSTCPD and SYSFTPD DD statements for configuration files. Cat II
ACF2-FT-000110 V-223527 IBM z/OS FTP.DATA configuration for the FTP Server must have INACTIVE statement properly set. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.