STIGUI
V-223859CAT II — Medium severitySV-223859r958482_rule

The IBM z/OS user account for the UNIX kernel (OMVS) must be properly defined to the security database.

Rule version RACF-US-000220 · STIG v9 · 2026-09-01

Discussion

To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.

Check

If OMVS userid is defined to the ESM as follows, this is not a finding.

No access to interactive on-line facilities (e.g., TSO, CICS, etc.) Default group specified as OMVSGRP or STCOMVS UID(0) HOME directory specified as "/" Shell program specified as "/bin/sh"

Fix

Define OMVS userid to the ESM as specified below:

No access to interactive on-line facilities (e.g., TSO, CICS, etc.) Default group specified as OMVSGRP or STCOMVS UID(0) HOME directory specified as "/" Shell program specified as "/bin/sh"

Identifiers

Group ID
V-223859
Group title
SRG-OS-000104-GPOS-00051
Rule ID
SV-223859r958482_rule
Check ID
C-25532r868908_chk
Fix ID
F-25520r868909_fix