IBM z/OS UNIX HFS MapName file security parameters must be properly specified.
An XCCDF Rule
Description
Removal of unneeded or non-secure functions, ports, protocols, and services mitigate the risk of unauthorized connection of devices, unauthorized transfer of information, or other exploitation of these resources.
- ID
- SV-224074r991589_rule
- Version
- TSS0-US-000010
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Review the settings in /etc/auto.master and /etc/mapname for z/OS UNIX security parameters and configure the values to conform to the specifications below.
The /etc/auto.master HFS file (and the use of Automount) is optional.
The setuid parameter and the security parameter have a significant security impact. For this reason these parameters must be explicitly specified and not be allowed to default.