STIGQter: STIG Summary: z/OS FDR for TSS STIG Version: 6 Release: 2 Benchmark Date: 20 Jan 2015:

FDR (Fast Dump Restore) security options are improperly specified.

DISA Rule

SV-27074r1_rule

Vulnerability Number

V-18014

Group Title

ZB000040

Rule Version

ZFDR0040

Severity

CAT I

CCI(s)

• CCI-000035 - The information system provides the capability for privileged administrators to configure the organization-defined security policy filters to support different security policies.

Weight

10

Fix Recommendation

The systems programmer will verify that the security option ALLCALL is set to Yes.

1) Execute the FDR ISPF dialog by entering the following on the command line:

EXEC 'SYS2.FDR.VXXXX.CLIST(ABRALLOC)'

2) Select 'I' on the FDR PRIMARY OPTIONS MENU for INSTALL.

3) Select '4' on the INSTALLATION OPTIONS MENU to select SETOPT - SET INSTALLATION OPTIONS IN THE FDR GLOBAL OPTIONS TABLE.

4) Verify the FDR program library data set on this panel is set to the current LOADLIB. Example: 'SYS2A.FDR.Vxxxx.LOADLIB'.

5) Select '1' to select SECURITY OPTIONS.

6) On the SET FDR GLOBAL SECURITY OPTIONS, review the ALLCALL setting, ensure it is set to YES.

Check Contents

a) The following steps are necessary for reviewing the FDR options:

1) Issue the following command on the command line at option 6 in TSO to bring up the FDR ISPF dialog:

EXEC 'SYS2.FDR.Vxxxx.CLIST(ABRALLOC)'

2) Select 'I' on the FDR primary panel for INSTALL.
3) Select '4' on the FDR installation options panel to select SETOPT.
4) Verify the FDR Program Library Data Set on this panel specifies the following:
Example: 'SYS2A.FDR.Vxxxx.LOADLIB'.
5) Select '1' for SECURITY OPTIONS.
6) Review the setting for ALLCALL

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZFDR0040)

b) If ALLCALL is set to YES, there is NO FINDING.

c) If ALLCALL is set to NO, this is a FINDING.

Vulnerability Number

V-18014

Documentable

False

Rule Version

ZFDR0040

Severity Override Guidance

a) The following steps are necessary for reviewing the FDR options:

1) Issue the following command on the command line at option 6 in TSO to bring up the FDR ISPF dialog:

EXEC 'SYS2.FDR.Vxxxx.CLIST(ABRALLOC)'

2) Select 'I' on the FDR primary panel for INSTALL.
3) Select '4' on the FDR installation options panel to select SETOPT.
4) Verify the FDR Program Library Data Set on this panel specifies the following:
Example: 'SYS2A.FDR.Vxxxx.LOADLIB'.
5) Select '1' for SECURITY OPTIONS.
6) Review the setting for ALLCALL

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZFDR0040)

b) If ALLCALL is set to YES, there is NO FINDING.

c) If ALLCALL is set to NO, this is a FINDING.

Check Content Reference

M

Responsibility

Systems Programmer

Target Key

1860

Comments