Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
IBM z/OS ACF2 Security Technical Implementation Guide
SRG-OS-000079-GPOS-00047
ACF2 TSOCRT GSO record values must be set to obliterate the logon to ASCII CRT devices.
ACF2 TSOCRT GSO record values must be set to obliterate the logon to ASCII CRT devices.
An XCCDF Rule
Details
Profiles
Prose
ACF2 TSOCRT GSO record values must be set to obliterate the logon to ASCII CRT devices.
Medium Severity
<VulnDiscussion>To prevent the compromise of authentication information, such as passwords during the authentication process, the feedback from the operating system must not provide any information allowing an unauthorized user to compromise the authentication mechanism. Obfuscation of user-provided information that is typed into the system is a method used when addressing this risk. Displaying asterisks when a user types in a password is an example of obscuring feedback of authentication information.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>