z/OS FDR for ACF2 STIG Version Comparison

There are 2 differences between versions v6 r2 (Jan. 20, 2015) (the "left" version) and v7 r1 (Jan. 30, 2025) (the "right" version).

Check ZFDR0040 was changed between these two versions. Green, underlined text was added, red, struck-out text was removed.

The regular view of the left check and right check may be easier to read.

Title

FDR (Fast Dump Restore) security options are improperly specified.

Check Content

a) The a) The following steps are necessary for reviewing the FDR options: 1) Issue options: 1) Issue the following command on the command line at option 6 in TSO to bring up the FDR ISPF dialog: EXEC 'SYS2.FDR.Vxxxx.CLIST(ABRALLOC)' 2) Select 'SYS2.FDR.Vxxxx.CLIST(ABRALLOC)' 2) Select 'I' on the FDR primary panel for INSTALL. 3) Select INSTALL. 3) Select '4' on the FDR installation options panel to select SETOPT. 4) Verify SETOPT. 4) Verify the FDR Program Library Data Set on this panel specifies the following: Example: 'SYS2A.FDR.Vxxxx.LOADLIB'. 5) Select 'SYS2A.FDR.Vxxxx.LOADLIB'. 5) Select '1' for SECURITY OPTIONS. 6) Review OPTIONS. 6) Review the setting for ALLCALL Automated Analysis Refer to the following report produced by the z/OS Data Collection: - PDI(ZFDR0040) b) If Collection: - PDI(ZFDR0040) b) If ALLCALL is set to YES, there is NO FINDING. c) If no finding. c) If ALLCALL is set to NO, this is a FINDING. finding.

Discussion

Product configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be weakened. This exposure may threaten the availability of the product applications, and compromise the confidentiality of customer data.

Fix

The systems programmer will verify that the security option ALLCALL is set to Yes. 1) Execute Yes. 1) Execute the FDR ISPF dialog by entering the following on the command line: EXEC line: EXEC 'SYS2.FDR.VXXXX.CLIST(ABRALLOC)' 2) Select 'SYS2.FDR.VXXXX.CLIST(ABRALLOC)' 2) Select 'I' on the FDR PRIMARY OPTIONS MENU for INSTALL. 3) Select INSTALL. 3) Select '4' on the INSTALLATION OPTIONS MENU to select SETOPT - SET INSTALLATION OPTIONS IN THE FDR GLOBAL OPTIONS TABLE. 4) Verify TABLE. 4) Verify the FDR program library data set on this panel is set to the current LOADLIB. Example: 'SYS2A.FDR.Vxxxx.LOADLIB'. 5) Select 'SYS2A.FDR.Vxxxx.LOADLIB'. 5) Select '1' to select SECURITY OPTIONS. 6) On OPTIONS. 6) On the SET FDR GLOBAL SECURITY OPTIONS, review the ALLCALL setting, ensure it is set to YES.