IBM z/OS UNIX Telnet server Startup parameters must be properly specified.
An XCCDF Rule
Description
<VulnDiscussion>The z/OS UNIX Telnet Server (i.e., otelnetd) provides interactive access to the z/OS UNIX shell. During the initialization process, startup parameters are read to define the characteristics of each otelnetd instance. Some of these parameters have an impact on system security. Failure to specify the appropriate command options could result in degraded security. This exposure may result in unauthorized access impacting data integrity or the availability of some system services.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-223867r604139_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure the startup parameters in the inetd.conf file for otelnetd to conform to the specifications below.
The otelnetd startup command includes the options -D login and -c 900, where:
-D login indicates that messages should be written to the syslogd facility for login and logout activity.