IBM z/OS FTP.DATA configuration statements for the FTP Server must be specified in accordance with requirements.
An XCCDF Rule
Description
This requirement is intended to cover both traditional interactive logons to information systems and general accesses to information systems that occur in other types of architectural configurations (e.g., service-oriented architectures).
- ID
- SV-255896r991589_rule
- Version
- TSS0-FT-000130
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the FTP configuration to include the UMASK statement with a value of "077".
If the FTP Server requires a UMASK value less restrictive than "077", requirements should be justified and documented with the ISSO.