You may find these queries useful.. They will adjust/report on any undesired OMVS segment as you described. You could run these periodically as an "after the fact" cleanup while you wait for an RFE to be fullfilled.
PROGRAM will be checked for '/bin/sh'
HOME will be checked for '/u/USERID' (USERID is upper case - Linnea has confirmed this privately)
Newlist type=racf nopage dd=cmdout name=badprog
Select class=user segment=omvs
Exclude program='/bin/sh'
Exclude key=(id1,id2,id3) /* ignore these */
Sortlist "alu" key(0) "OMVS(PROGRAM('/bin/sh'))",
"/* was" program(0) "*/"
Newlist type=racf nopage dd=cmdout name=badhome
Select class=user segment=omvs
Exclude substr(home,1,3)='/u/' substr(home,4)==key
Exclude key=(id1,id2,id3) /* ignore these */
Sortlist "alu" key(0) "OMVS(HOME('/u/" | key(0) | "'))",
"/* was" home(0) "*/"
Newlist type=racf,
T='Users with unexpected PROGRAM or HOME that were adjusted',
empty='OK.. All OMVS segments were as expected'
Select likelist=badprog
Select likelist=badhome
Sortlist key(8,'Userid') :name home program
------------------------------
Simon Dodge
------------------------------
Original Message:
Sent: Thu July 08, 2021 03:01 PM
From: Linnea Sullivan
Subject: Command Verifier controlling the contents of the OMVS Segment
From looking at the Command Verifier Manual, I did not see where I can control the contents of the fields HOME and PROGRAM. I want the HOME directory in most cases to be /u/USERID and PROGRAM to be /bin/sh But I have some administrators that keep deviating from that approach. I was hoping to use Command Verifier to prevent those administrators from incorrectly populating the fields.
I used access monitor data to "watch" me change some OMVS Segments but I did not see any C4R resources that indicated the HOME or PROGRAM fields.
Could I set up a post process that if these admins added or altered the HOME or PROGRAM, that I could enter an ALTUSER command to set the fields the way I wanted? My only concern would be the HOME directory since it is /u/USERID, not sure how to code the APPLDATA for that one.
------------------------------
Linnea Sullivan
------------------------------