Environment
Novell Privileged User Manager 2.3.0
Situation
Group list in Command Control metadata has 'rouge' group node.
Enabling $<Groups>$ in the Rule 'User Message' will display the rouge group node.
This doesn't actually affect the running of Command Control, as the Command Control client will ignore the rouge group because it doesn't have a "name" attribute, but it could be possible to break custom scripts that manipulate the group node.
Resolution
Apply Privileged User Manager 2.3.0 HF3 (2.3.0-3) or greater.
Additional Information
Group list in Command Control metadata has rogue group node (in bold), for example:
<Groups i.items="6">
<group i.gid="-776099176"/>
<group i.gid="1048" name="dbagroup"/>
<group i.gid="1047" name="vmware"/>
<group i.gid="1042" name="security"/>
<group i.gid="100" name="users"/>
<group i.gid="33" name="video"/>
<group i.gid="16" name="dialout"/>
</Groups>