STIGQter: STIG Summary: IBM z/VM Using CA VM:Secure Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 27 Apr 2018:

The IBM z/VM Portmapper server virtual machine userID must be included in the AUTOLOG statement of the TCP/IP server configuration file.

DISA Rule

SV-93633r1_rule

Vulnerability Number

V-78927

Group Title

SRG-OS-000379-GPOS-00164

Rule Version

IBMZ-VM-000960

Severity

CAT II

CCI(s)

• CCI-001967 - The information system authenticates organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Include the Portmapper server virtual machine userID in the “AUTOLOG” statement of the TCP/IP server configuration file.

The Portmapper server is then automatically started when TCP/IP is initialized. The IBM default userID for this server is PORTMAP, but review installation to assure proper ID is included.

Check Contents

Examine the TCP/IP configuration for “AUTOLOG”.

If the userID for auto logger is not in the “AUTOLOG” statement of the TCP/IP server configuration file, this is a finding.

Vulnerability Number

V-78927

Documentable

False

Rule Version

IBMZ-VM-000960

Severity Override Guidance

Examine the TCP/IP configuration for “AUTOLOG”.

If the userID for auto logger is not in the “AUTOLOG” statement of the TCP/IP server configuration file, this is a finding.

Check Content Reference

M

Target Key

3211

Comments