UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

TCPIP.DATA configuration statements for the TCP/IP stack must be properly specified.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3216 ITCP0020 SV-3216r4_rule Medium
Description
During the initialization of TCP/IP servers and clients, the TCPIP.DATA configuration file provides information that is essential for proper operations of TCP/IP applications. Inappropriate values could result in undesirable operations and degraded security. This exposure may result in unauthorized access impacting data integrity or the availability of some system services.
STIG Date
z/OS ACF2 STIG 2019-03-26

Details

Check Text ( C-3121r2_chk )
Refer to the Data configuration file specified on the SYSTCPD DD statement in the TCPIP started task JCL.

Automated Analysis
Refer to the following report produced by the IBM Communications Server Data Collection:

- PDI(ITCP0020)

Verify that the following configuration statements are specified in the TCP/IP Data configuration file. If the following guidance is true, this is not a finding.

TCPIPJOBNAME
HOSTNAME
DOMAINORIGIN/DOMAIN (The DOMAIN statement is functionally equivalent to the DOMAINORIGIN Statement)
DATASETPREFIX
Fix Text (F-35824r2_fix)
Review the configuration statements in the TCPIP.DATA file and ensure they conform to the specifications below:

TCPIPJOBNAME - Specifies the job name of the TCP/IP address space. This name is also used as part of the name of some network security resources.

HOSTNAME - Specifies the TCP/IP host portion of the DNS name of the system.

DOMAINORIGIN/DOMAIN - Specifies the default domain name used for DNS searches.

DATASETPREFIX - Specifies the high-level qualifier to be used to dynamically allocate other configuration data sets.

The TCPIP.DATA file acts as the anchor configuration data set for the TCP/IP stack and all TCP/IP servers and clients running in z/OS. During the initialization of TCP/IP servers and clients, the TCPIP.DATA file provides basic information that is essential for proper operation.

The above TCPIP.DATA configuration parameters provide crucial information to TCP/IP applications.