STIGUI
V-223511CAT II — Medium severitySV-223511r1225975_rule

ACF2 TSO2741 GSO record values must be set to obliterate the logon password on 2741 devices.

Rule version ACF2-ES-000940 · STIG v9 · 2026-09-01

Discussion

To prevent the compromise of authentication information, such as passwords during the authentication process, the feedback from the operating system must not provide any information allowing an unauthorized user to compromise the authentication mechanism.

Check

From the ISPF Command Shell enter: ACF <enter> SET CONTROL(GSO) LIST TSO2741

If the GSO TSO2741 record values conform to the following requirements, this is not a finding.

BS(16) LENGTH(8) M1(X) M2(N) M3(Z) M4(M) STRING()

Fix

Define a cross out string used to obliterate the logon password on 2741 devices.

Ensure the GSO TSO2741 record values conform to the following requirements.

BS(16) LENGTH(8) M1(X) M2(N) M3(Z) M4(M) STRING()

Example: SET C(GSO) INSERT TSO2741 BS(16) LENGTH(8) M1(X) M2(N) M3(Z) M4(M) STRING()

F ACF2,REFRESH(TSO2741)

Identifiers

Group ID
V-223511
Group title
SRG-OS-000079-GPOS-00047
Rule ID
SV-223511r1225975_rule
Check ID
C-25184r695444_chk
Fix ID
F-25172r504604_fix