DC DC DC DC DC CL8'BPXAS' CL8'OMVSKERN' CL8'OMVSGRP' XL1'00' XL7'00' PROCEDURE NAME USERID (ANY RACF-DEFINED USER ID) GROUP NAME OR BLANKS FOR USER'S DEFAULT GROUP NOT TRUSTED RESERVED This associates user ID OMVSKERN and group ID OMVSGRP with started task (STC) procedures OMVS, BPXOINIT, and BPXAS. Note that information about the security requirements of BPXAS is inconclusive. As a result, it is typical to define BPXAS with the same attributes as BPXOINIT. Adding USER/GROUP OMVS segments for a TSO user To complete the activation of z/OS UNIX in full function mode, a TSO user ID needs to be available with the correct authorities to perform z/OS UNIX administration work. This could be any existing user but for the purposes of this book we will use the commonly known IBMUSER user ID. This may be substituted by any appropriate user ID. A TSO user with RACF SPECIAL authority should enter commands similar to the following example: CONNECT (IBMUSER) GROUP(OMVSGRP) ALTUSER IBMUSER DFLTGRP(OMVSGRP) OMVS(UID(0) HOME('/') PROGRAM('/bin/sh')) This alters existing TSO user ID IBMUSER to have UNIX UID(0) associated to it (note that UID=0 is the UNIX superuser UID, with special administrative powers that other UIDs do not have). The default RACF group is OMVSGRP, the home path is the root directory (/), and the default shell is /bin/sh.