TCPIP.DATA configuration statements for the TCP/IP stack must be properly specified.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3216	ITCP0020	SV-3216r4_rule		Medium

Description
During the initialization of TCP/IP servers and clients, the TCPIP.DATA configuration file provides information that is essential for proper operations of TCP/IP applications. Inappropriate values could result in undesirable operations and degraded security. This exposure may result in unauthorized access impacting data integrity or the availability of some system services.

STIG	Date
z/OS RACF STIG	2018-12-20

Details

Check Text ( C-3121r2_chk )
Refer to the Data configuration file specified on the SYSTCPD DD statement in the TCPIP started task JCL. Automated Analysis Refer to the following report produced by the IBM Communications Server Data Collection: - PDI(ITCP0020) Verify that the following configuration statements are specified in the TCP/IP Data configuration file. If the following guidance is true, this is not a finding. TCPIPJOBNAME HOSTNAME DOMAINORIGIN/DOMAIN (The DOMAIN statement is functionally equivalent to the DOMAINORIGIN Statement) DATASETPREFIX

Check Text ( C-3121r2_chk )

Refer to the Data configuration file specified on the SYSTCPD DD statement in the TCPIP started task JCL.

Automated Analysis
Refer to the following report produced by the IBM Communications Server Data Collection:

- PDI(ITCP0020)

Verify that the following configuration statements are specified in the TCP/IP Data configuration file. If the following guidance is true, this is not a finding.

TCPIPJOBNAME
HOSTNAME
DOMAINORIGIN/DOMAIN (The DOMAIN statement is functionally equivalent to the DOMAINORIGIN Statement)
DATASETPREFIX

Fix Text (F-35824r2_fix)
Review the configuration statements in the TCPIP.DATA file and ensure they conform to the specifications below: TCPIPJOBNAME - Specifies the job name of the TCP/IP address space. This name is also used as part of the name of some network security resources. HOSTNAME - Specifies the TCP/IP host portion of the DNS name of the system. DOMAINORIGIN/DOMAIN - Specifies the default domain name used for DNS searches. DATASETPREFIX - Specifies the high-level qualifier to be used to dynamically allocate other configuration data sets. The TCPIP.DATA file acts as the anchor configuration data set for the TCP/IP stack and all TCP/IP servers and clients running in z/OS. During the initialization of TCP/IP servers and clients, the TCPIP.DATA file provides basic information that is essential for proper operation. The above TCPIP.DATA configuration parameters provide crucial information to TCP/IP applications.

Fix Text (F-35824r2_fix)

Review the configuration statements in the TCPIP.DATA file and ensure they conform to the specifications below:

TCPIPJOBNAME - Specifies the job name of the TCP/IP address space. This name is also used as part of the name of some network security resources.

HOSTNAME - Specifies the TCP/IP host portion of the DNS name of the system.

DOMAINORIGIN/DOMAIN - Specifies the default domain name used for DNS searches.

DATASETPREFIX - Specifies the high-level qualifier to be used to dynamically allocate other configuration data sets.

The TCPIP.DATA file acts as the anchor configuration data set for the TCP/IP stack and all TCP/IP servers and clients running in z/OS. During the initialization of TCP/IP servers and clients, the TCPIP.DATA file provides basic information that is essential for proper operation.

The above TCPIP.DATA configuration parameters provide crucial information to TCP/IP applications.