RSH RACF Tips
Newsletter Subscription Form
|
|
RSH RACF Tips
- Volume 7, Issue 2
- Improved
RACF Googling
- SURROGAT Contest Winner
- IRRUT200 ACTIVATE Hang
- DEFINE RECATALOG Check
- Protecting Program EDGINERS
- Auditors: Check the PPT
- RACF FMID Reference
- RACF Health Checker Issues
- Group GID VLF Cache Problem
|
April 2013 |
RSH RACF Tips
- Volume 7, Issue 1
- Protect
Shutdown Commands
- Custom Field Names
- RRSF & Batches of Commands
- UNIX sudo & sudoedit
- Auditors: Confirm Started Task and Batch IDs are PROTECTED
- SURROGAT Contest
- FIELD Permits to &RACUID
|
Jan 2013 |
RSH RACF Tips
- Volume 6, Issue 4
- RRSF & TCPIP
Communication Failure Issue
- AIM Conversion Lockup Issue
- FASTAUTH & DEFAULT TOKEN
- ABEND Due to FROM Profile With Undefined OWNER
- Many More FACILITY Resources
- Unix Default User & MAXUIDS
- ITOM Resource Name Error
- Unix Path Names in SMF Unload Records Can Have // Prefix
- Identify Underlying zFS Dataset
|
Oct 2012 |
RSH RACF Tips
- Volume 6, Issue 3
- To All Our
Clients - Thank You!
- REQUEST=VERIFY & GLOBAL
- FACILITY BPX.SAFFASTPATH
- SMF Type 30 Records
- Auditors: Confirm PROTECTALL is Active
- More on Replacing BPX.DEFAULT.USER
- Listing CA-1 Security Options
|
July 2012 |
RSH RACF Tips
- Volume 6, Issue 2
- Replacing
BPX.DEFAULT.USER
- Additional GLOBAL Entries
- Temporary Dataset Protection
- Auditors: Review Tape BLP Authority
|
April 2012 |
RSH RACF Tips
- Volume 6, Issue 1
- CICS TS 4.2
& RACF
- RACF-L Internet Discussion List
- Auditors: Review PROGRAM Protection
- Beware Making the Unix Default User a File or Directory
Owner
- ISPF 3.17 MA Line Command
- Protect TCP/IP Low Ports
- TSO User Data Sharing
|
Jan 2012 |
RSH RACF Tips
- Volume 5, Issue 4
- z/OS UNIX
Security Enhancement
- Duplicate JOBINIT Records
- Indicate Permit Level in DATA
- Is * or ** More Specific? (Answer)
- Auditors: Review Tape Dataset Protection Bypass Authority
- Password Reset Authority Delegation
- CF Rebuild Can Hang Sysplex
|
Oct 2011 |
RSH RACF Tips
- Volume 5, Issue 3
- z/OS
Security & Integrity APARs
- Performance Tip: IRRDBU00
- Monitoring Using JESJOBS
- IRRHFSU & UAUDIT
- Auditors: Review SETROPTS AUDIT(classes)
- Your Unix Default User May Own Files & Directories
- More FACILITY Resources
- Grouping Profile Name Length
|
July 2011 |
RSH RACF Tips
- Volume 5, Issue 2
- Trust SMS
- Proper RACF Database Backup
- Demise of BPX.DEFAULT.USER
- MVS.DISPLAY.TCPIP
- RACF Administrator's DFLTGRP
- RACF Protect TCP/IP Ports
- Auditors: Review Password Minimum Change Interval
|
April 2011 |
RSH RACF Tips
- Volume 5, Issue 1
- IGGCSI00 and
Catalog Access
- Prevent Connection Mishaps
- WHEN(CONSOLE(SDSF))
- Websphere Library Change
- Performance: CA-Endevor LAT
- Auditors: Check Password History Option
|
Jan 2011 |
RSH RACF Tips
- Volume 4, Issue 4
- SMP/E
Protection
- Performance: GENERICANCHOR
- Correction: FILEPROCMAX
- FASTAUTH Now Honors TRUSTED and PRIVILEGED
- Auditors: Check User Password Change Intervals
- IPv4 Terminal IDs
|
Oct 2010 |
RSH RACF Tips
- Volume 4, Issue 3
- Goodbye
VSAMDSET and SYSCTLG
- DB2 DDF and FILEPROCMAX
- OPERCMDS Profile Prefixes
- Auditors: Check for Weak Password Rules
- Performance: CICS USRDELAY
- SEARCH LEVEL(nn)
|
July 2010 |
RSH RACF Tips
- Volume 4, Issue 2
- FTP and JES
- Quick LD in ISPF 3.4 DSLIST
- Eliminating
Discrete 'Generics'
- Auditors: Validate PROGRAM Profile Libraries
|
April 2010 |
RSH RACF Tips
- Volume 4, Issue 1
- Custom Field
List Titles
- Safely Implement PROTECTED
- Auditors: Verify LOGOPTIONS are set to log z/OS Unix
events
- ISPF 3.17 Udlist - List Unix Files & Directories
|
Jan 2010 |
RSH RACF Tips
- Volume 3, Issue 4
- Reducing
Unix Superuser Use
- Should You Monitor or Restrict LISTDSD, RLIST, or SEARCH?
- List All SETROPTS Options without System-AUDITOR
- SMF Unload
LRECL Change
- Auditors:
Review Access Permitted to *
- Restrict Use of DSMON
|
Oct 2009 |
RSH RACF Tips
- Volume 3, Issue 3
- RACLIST
REFRESH & STARTED
- AUDITOR UNIX APAR
- RMM Superuser
- RESTRICTED &
UNIX Access
- SEARCH
Command Mystery (Answer)
- Auditors: Verify Tape Data Protection is Active
- TSO APPL
Class Resource
|
July 2009 |
RSH RACF Tips
- Volume 3, Issue 2
- TEMPDSN and
CA-Endevor
- JESINPUT
- Performance: Database Reorg
- Auditors: PRIVILEGED and TRUSTED Started Tasks
|
April 2009 |
RSH RACF Tips
- Volume 3, Issue 1
- Specifying a
Replacement ID with IRRRID00
- Recent APARs
of Interest
- Temporary
Access with CONNECT REVOKE(date)
- Auditors:
How to Examine z/OS Unix Directory and File Security
- Limit on DB2
Secondary AUTHIDs Raised
|
Jan 2009 |
RSH RACF Tips
- Volume 2, Issue 4
- Authority to
Administer Unix Directory & File Permissions
- Performance:
Avoid SETROPTS GENERIC(DATASET) REFRESH
- Auditors:
Find and Investigate Profiles in WARNING
|
Oct 2008 |
RSH RACF Tips
- Volume 2, Issue 3
- OPERATIONS
Authority Considerations
- Avoiding
Output Browse Violation Messages in SDSF
- z/OS Unix
Use Control
- Auditors:
Review ALTER Access to Catalogs
|
July 2008 |
RSH RACF Tips
- Volume 2, Issue 2
- LISTDSD
Hints
- Sharing
Output in SDSF (Without JESSPOOL Permission)
- Auditors:
Review RACFVARS Profile &RACLNDE
|
April 2008 |
RSH RACF Tips
- Volume 2, Issue 1
- Practical
Uses for LEVEL
- CSA Storage
Protection
- Auditors:
Verify FDR's RACF Interface is Active
|
Jan 2008 |
RSH RACF Tips
- Volume 1, Issue 3
- Performance:
Resident Data Blocks (RDBs)
- Auditors:
Review Outbound NJE Transmission Controls
|
Oct 2007 |
RSH RACF Tips
- Volume 1, Issue 2
- Entering
RACF Commands at the Console
- Performance:
NOYOURACC
- Auditors:
Review DITTO and FILE Manager DISK.FULLPACK
|
July 2007 |
RSH RACF Tips
- Volume 1, Issue 1
- Avoiding
DFSMShsm Recalls with ARCCATGP
- Performance:
Increase your Enqueue Residency - ERV
- Enable
Logging of Access to CA's ENDEVOR Resources
- Auditors:
Review SURROGAT Batch Submit Authority
|
April 2007 |
