IBM z/OS FTP.DATA configuration statements for the FTP Server must be specified in accordance with requirements.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-255896	TSS0-FT-000130	SV-255896r877951_rule		Medium

Description
This requirement is intended to cover both traditional interactive logons to information systems and general accesses to information systems that occur in other types of architectural configurations (e.g., service-oriented architectures).

STIG	Date
IBM z/OS TSS Security Technical Implementation Guide	2022-12-14

Details

Check Text ( C-59573r877347_chk )
Refer to the Data configuration file specified on the SYSFTPD DD statement in the FTP started task JCL. If the UMASK statement is coded with a value of "077", this is not a finding.

Fix Text (F-59516r877348_fix)
Configure the FTP configuration to include the UMASK statement with a value of "077". If the FTP Server requires a UMASK value less restrictive than "077", requirements should be justified and documented with the ISSO.