Posts related to RACF
Before the introduction of the RACF STARTED class, table ICHRIN03 was the way RACF had to control started tasks. However, and contrary to what we may believe, ICHRIN03 still plays an important role. ICHRIN03 is still used when: No STARTED class profile covering a resource exists A STARTED class profile […]
In z/OS Unix System Services (USS), Access Control Lists (ACLs) are used in conjunction with the normal permission bits, allowing access control for files and directories by individual UIDs and GIDs. These are known as extended Access Control Lists and require RACF class FSSEC to be active. Although controlled by […]
The Data Security Monitor (DSMON) is an IBM RACF utility that produces reports on: System report: Displays system information (Operating System, RACF level, Sysres volume, SMF id) Group Tree report: Shows the hierarchy of RACF groups Program Properties Table (PPT) report: Lists programs that execute with special privileges RACF Authorised […]
Have you ever thought what would happen if your External Security Manager (RACF, ACF2, or TSS) becomes unavailable? How will you be able to access your mainframe system? Well, SYS1.UADS is the answer to this question. This dataset contains the list of users that can access the mainframe system should […]
IBM provides several utilities for RACF that can be helpful for a mainframe security administrator. Without going into much detail on each of the RACF utilities, the following table provides an explanation of what each of these utilities is for: Utility Description IRRMIN00 RACF database initialisation utility. IRRMIN00 can be […]
Copyright © 2024 Rui Miguel Feio