UCF STIG Viewer Logo

IBM z/OS FTP.DATA configuration statements for the FTP Server must be specified in accordance with requirements.


Finding ID Version Rule ID IA Controls Severity
V-223739 RACF-FT-000070 SV-223739r604139_rule Medium
This requirement is intended to cover both traditional interactive logons to information systems and general accesses to information systems that occur in other types of architectural configurations (e.g., service-oriented architectures).
IBM z/OS RACF Security Technical Implementation Guide 2022-09-19


Check Text ( C-25412r514905_chk )
Refer to the Data configuration file specified on the SYSFTPD DD statement in the FTP started task JCL.

If the UMASK statement is coded with a value of 077, this is not a finding.
Fix Text (F-25400r514906_fix)
Configure the FTP configuration to include the UMASK statement with a value of 077.

If the FTP Server requires a UMASK value less restrictive than 077, requirements should be justified and documented with the ISSO.