STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 9 Release: 9 Benchmark Date: 01 Jul 2026:

IBM z/OS UNIX groups must be defined with a unique GID.

DISA Rule

SV-223636r1225857_rule

Vulnerability Number

V-223636

Group Title

SRG-OS-000104-GPOS-00051

Rule Version

ACF2-US-000210

Severity

CAT II

CCI(s)

CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

Fix Recommendation

Define each UNIX group with a unique GID.

Check Contents

From an ACF Command screen enter:
SET PROFILE(GROUP) DIVISION(OMVS)
LIST LIKE(-)

If each of the definitions have a unique GID, this is not a finding.

Vulnerability Number

V-223636

Documentable

False

Rule Version

ACF2-US-000210

Severity Override Guidance

From an ACF Command screen enter:
SET PROFILE(GROUP) DIVISION(OMVS)
LIST LIKE(-)

If each of the definitions have a unique GID, this is not a finding.

Check Content Reference

Target Key

4100