Check: ACF2-ES-000700
IBM z/OS ACF2 STIG:
ACF2-ES-000700
(in versions v8 r15 through v7 r1)
Title
ACF2 APPLDEF GSO record if used must have supporting documentation indicating the reason it was used. (Cat III impact)
Discussion
Failure to restrict network connectivity only to authorized systems permits inbound connections from malicious systems. It also permits outbound connections that may facilitate exfiltration of DoD data.
Check Content
From the ACF Command screen enter: SET CONTROL(GSO) LIST LIKE(APPLDEF-) If the GSO APPLDEF record does not exist, this is not a finding. If the GSO APPLDEF record does exist and no supporting documentation is available, this is a finding.
Fix Text
For any APPLDEF GSO record used, it must have supporting documentation indicating the reason it was used. The APPLDEF record is optional.
Additional Identifiers
Rule ID: SV-223488r533198_rule
Vulnerability ID: V-223488
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
| CCI-000368 |
The organization documents any deviations from the established configuration settings for organization-defined information system components based on organization-defined operational requirements. |
Controls
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |