← Back to IBM zVM Using CA VM:Secure Security Technical Implementation Guide

V-237921

CAT II (Medium)

The IBM z/VM TCP/IP ANONYMOU statement must not be coded in FTP configuration.

Rule ID

SV-237921r858975_rule

STIG

IBM zVM Using CA VM:Secure Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000804

Discussion

Operating systems utilizing encryption are required to use FIPS-compliant mechanisms for authenticating to cryptographic modules.

Check Content

If there is no FTP Server active, this is not applicable.

Examine the "DTCPARMS" file for each active FTP server.

If there is ":ANONYMOUS" or ":ANONYMOU" statement, this is a finding.

Examine the "SRVRFTP" command.

If "ANONYMOU" is coded, this is a finding.

Fix Text

Ensure the ":ANONYMOUS" or ":ANONYMOU" statement is not coded in the "DTCPARMS" or "SRVRFTP" command.