//@DSAM001 JOB (DSP),'LINNEA SULLIVAN', J0059155 // MSGCLASS=T,CLASS=R,REGION=0M /*JOBPARM SYSAFF=PR18 //**************************************************************** //* This is a zSecure Access Monitor report of all permissions //* showing the last time the permission was used. This job //* brings in the 18 month access monitor files, zsecure unloads, //* and the CKFREEZE files from all systems. //* //* Note: You can not report on the complex where the permission //* was last used. There is no way from discussing with //* zSecure support to match the COMPLEX to the //* max(access_lastuse) //**************************************************************** //* //DELETE EXEC PGM=IEFBR14 //PREVIOUS DD DSN=TSTSA.#ZSECURE.AMDATA.USRGRP, // DISP=(MOD,DELETE,DELETE),UNIT=SYSDA,SPACE=(TRK,1) //* //CKRCARLA EXEC PGM=CKRCARLA,MEMLIMIT=NOLIMIT,PARM='I DD=CKRSPROF' //STEPLIB DD DISP=SHR,DSN=SYSSS.ZSECURE.SCKRLOAD //CKRCARLA DD DISP=SHR,DSN=SYSSS.ZSECURE.SCKRCARL //SYSPRINT DD SYSOUT=* //*CKREPORT DD SYSOUT=*,LRECL=300 //CKREPORT DD DSN=TSTSA.#ZSECURE.AMDATA.USRGRP, // UNIT=SYSDA,SPACE=(CYL,(50,50)), // DISP=(NEW,CATLG,DELETE), // DCB=(LRECL=300,RECFM=FB,BLKSIZE=30000) //CKRCMD DD SYSOUT=* //CKR2PASS DD SYSOUT=* //************************************** //* ACCESS MONITOR FILES - ALL SYSTEMS** //************************************** //C1ACC00 DD DSN=SYSSA.#ZSECURE.SSZSECAM.PRDPLEX.R18MON,DISP=SHR //C1ACC10 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SPR1W.R18MON,DISP=SHR //C1ACC11 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SPR1X.R18MON,DISP=SHR //C1ACC12 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SPR1Y.R18MON,DISP=SHR //C1ACC13 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SPR1Z.R18MON,DISP=SHR //C1ACC20 DD DSN=SYSSA.#ZSECURE.SSZSECAM.TSTPLEX.R18MON,DISP=SHR //*C1ACC30 DD DSN=SYSSA.#ZSECURE.SSZSECAM.HALPLEX.R18MON,DISP=SHR //C1ACC40 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SDMPLEX.R18MON,DISP=SHR //C1ACC50 DD DSN=SYSSA.#ZSECURE.SSZSECAM.TSAPLEX.R18MON,DISP=SHR //C1ACC60 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SDV2W.R18MON,DISP=SHR //C1ACC61 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SDV2X.R18MON,DISP=SHR //C1ACC62 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SDV2Y.R18MON,DISP=SHR //C1ACC63 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SDV2Z.R18MON,DISP=SHR //C1ACC70 DD DSN=SYSSA.#ZSECURE.SSZSECAM.TDAPLEX.R18MON,DISP=SHR //C1ACC80 DD DSN=SYSSA.#ZSECURE.SSZSECAM.SDAPLEX.R18MON,DISP=SHR //C1ACC90 DD DSN=SYSSA.#ZSECURE.SSZSECAM.TSBPLEX.R18MON,DISP=SHR //************************************** //* CKFREEZE FILES - ALL SYSTEMS ** //************************************** //C3IOC00 DD DSN=SYSSA.#ZSECURE.XDS3645A.SPR18.CKFREEZE,DISP=SHR //*C3IOC01 DD DSN=SYSSA.#ZSECURE.XDS3631A.S0400.CKFREEZE,DISP=SHR //*C3IOC02 DD DSN=SYSSA.#ZSECURE.XDS3632A.S0600.CKFREEZE,DISP=SHR //*C3IOC03 DD DSN=SYSSA.#ZSECURE.XDS3633A.S1000.CKFREEZE,DISP=SHR //*C3IOC04 DD DSN=SYSSA.#ZSECURE.XDS3634A.SPRDC.CKFREEZE,DISP=SHR //*C3IOC05 DD DSN=SYSSA.#ZSECURE.XDS3635A.SPRDF.CKFREEZE,DISP=SHR //*C3IOC06 DD DSN=SYSSA.#ZSECURE.XDS3636A.SPRD2.CKFREEZE,DISP=SHR //*C3IOC07 DD DSN=SYSSA.#ZSECURE.XDS3637A.SPRD3.CKFREEZE,DISP=SHR //*C3IOC08 DD DSN=SYSSA.#ZSECURE.XDS3638A.SPRD5.CKFREEZE,DISP=SHR //*C3IOC09 DD DSN=SYSSA.#ZSECURE.XDS3639A.SPR1G.CKFREEZE,DISP=SHR //*C3IOC0A DD DSN=SYSSA.#ZSECURE.XDS3644A.SPR17.CKFREEZE,DISP=SHR //*C3IOC0B DD DSN=SYSSA.#ZSECURE.XDS3630A.S0100.CKFREEZE,DISP=SHR //C3IOC10 DD DSN=SYSSA.#ZSECURE.XDS3731A.SPR1W.CKFREEZE.COPY,DISP=SHR //C3IOC11 DD DSN=SYSSA.#ZSECURE.XDS3733A.SPR1X.CKFREEZE.COPY,DISP=SHR //C3IOC12 DD DSN=SYSSA.#ZSECURE.XDS3640A.SPR1Y.CKFREEZE.COPY,DISP=SHR //C3IOC13 DD DSN=SYSSA.#ZSECURE.XDS3642A.SPR1Z.CKFREEZE.COPY,DISP=SHR //C3IOC20 DD DSN=SYSSA.#ZSECURE.XDS3646A.SDV21.CKFREEZE,DISP=SHR //C3IOC21 DD DSN=SYSSA.#ZSECURE.XDS3647A.SDV22.CKFREEZE,DISP=SHR //C3IOC22 DD DSN=SYSSA.#ZSECURE.XDS3650A.SDV25.CKFREEZE,DISP=SHR //C3IOC23 DD DSN=SYSSA.#ZSECURE.XDS3651A.SDV26.CKFREEZE,DISP=SHR //*C3IOC30 DD DSN=SYSSA.#ZSECURE.XDS3656A.SHA23.CKFREEZE,DISP=SHR //*C3IOC31 DD DSN=SYSSA.#ZSECURE.XDS3657A.SHA24.CKFREEZE,DISP=SHR //*C3IOC32 DD DSN=SYSSA.#ZSECURE.XDS3658A.SHA25.CKFREEZE,DISP=SHR //*C3IOC33 DD DSN=SYSSA.#ZSECURE.XDS3659A.SHA26.CKFREEZE,DISP=SHR //C3IOC40 DD DSN=SYSSA.#ZSECURE.XDS3662A.SXM3A.CKFREEZE,DISP=SHR //C3IOC41 DD DSN=SYSSA.#ZSECURE.XDS3663A.SXM3B.CKFREEZE,DISP=SHR //C3IOC42 DD DSN=SYSSA.#ZSECURE.XDS3664A.SXM3C.CKFREEZE,DISP=SHR //C3IOC43 DD DSN=SYSSA.#ZSECURE.XDS3667A.SXM31.CKFREEZE,DISP=SHR //C3IOC44 DD DSN=SYSSA.#ZSECURE.XDS3668A.SXM32.CKFREEZE,DISP=SHR //C3IOC45 DD DSN=SYSSA.#ZSECURE.XDS3669A.SXM33.CKFREEZE,DISP=SHR //C3IOC46 DD DSN=SYSSA.#ZSECURE.XDS3670A.SXM34.CKFREEZE,DISP=SHR //C3IOC47 DD DSN=SYSSA.#ZSECURE.XDS3671A.SXM35.CKFREEZE,DISP=SHR //C3IOC48 DD DSN=SYSSA.#ZSECURE.XDS3672A.SXM36.CKFREEZE,DISP=SHR //C3IOC49 DD DSN=SYSSA.#ZSECURE.XDS3673A.SXM37.CKFREEZE,DISP=SHR //C3IOC4A DD DSN=SYSSA.#ZSECURE.XDS3674A.SXM38.CKFREEZE,DISP=SHR //C3IOC4B DD DSN=SYSSA.#ZSECURE.XDS3675A.SXM39.CKFREEZE,DISP=SHR //C3IOC50 DD DSN=SYSSA.#ZSECURE.XDS3684A.SDV28.CKFREEZE,DISP=SHR //C3IOC51 DD DSN=SYSSA.#ZSECURE.XDS3691A.SDV29.CKFREEZE,DISP=SHR //*C3IOC52 DD DSN=SYSSA.#ZSECURE.XDS3683A.SDV27.CKFREEZE,DISP=SHR //C3IOC60 DD DSN=SYSSA.#ZSECURE.XDS3692A.SDV2W.CKFREEZE,DISP=SHR //C3IOC61 DD DSN=SYSSA.#ZSECURE.XDS3694A.SDV2X.CKFREEZE,DISP=SHR //C3IOC62 DD DSN=SYSSA.#ZSECURE.XDS3707A.SDV2Y.CKFREEZE,DISP=SHR //C3IOC63 DD DSN=SYSSA.#ZSECURE.XDS3709A.SDV2Z.CKFREEZE,DISP=SHR //C3IOC70 DD DSN=SYSSA.#ZSECURE.XDS3718A.SDV47.CKFREEZE,DISP=SHR //C3IOC71 DD DSN=SYSSA.#ZSECURE.XDS3719A.SDV48.CKFREEZE,DISP=SHR //C3IOC72 DD DSN=SYSSA.#ZSECURE.XDS3720A.SDV49.CKFREEZE,DISP=SHR //C3IOC80 DD DSN=SYSSA.#ZSECURE.XDS3743A.SXM11.CKFREEZE,DISP=SHR //C3IOC81 DD DSN=SYSSA.#ZSECURE.XDS3744A.SXM12.CKFREEZE,DISP=SHR //C3IOC82 DD DSN=SYSSA.#ZSECURE.XDS3745A.SXM13.CKFREEZE,DISP=SHR //C3IOC83 DD DSN=SYSSA.#ZSECURE.XDS3746A.SXM14.CKFREEZE,DISP=SHR //C3IOC84 DD DSN=SYSSA.#ZSECURE.XDS3747A.SXM15.CKFREEZE,DISP=SHR //C3IOC85 DD DSN=SYSSA.#ZSECURE.XDS3748A.SXM16.CKFREEZE,DISP=SHR //C3IOC86 DD DSN=SYSSA.#ZSECURE.XDS3749A.SXM17.CKFREEZE,DISP=SHR //C3IOC87 DD DSN=SYSSA.#ZSECURE.XDS3750A.SXM18.CKFREEZE,DISP=SHR //C3IOC88 DD DSN=SYSSA.#ZSECURE.XDS3751A.SXM19.CKFREEZE,DISP=SHR //C3IOC89 DD DSN=SYSSA.#ZSECURE.XDS3752A.SXM1A.CKFREEZE,DISP=SHR //C3IOC8A DD DSN=SYSSA.#ZSECURE.XDS3753A.SXM1B.CKFREEZE,DISP=SHR //C3IOC8B DD DSN=SYSSA.#ZSECURE.XDS3754A.SXM1C.CKFREEZE,DISP=SHR //C3IOC90 DD DSN=SYSSA.#ZSECURE.XDS3761A.SDV54.CKFREEZE,DISP=SHR //*C3IOC91 DD DSN=SYSSA.#ZSECURE.XDS?????.SDV52.CKFREEZE,DISP=SHR //************************************** //* ZSECURE UNLOADS - ALL SYSTEMS ** //* USE UNLOADS INSTEAD OF RACF DB** //************************************** //C2UNL00 DD DSN=SYSSA.RACF.PRDPLEX.ZSECUNLD.DAILY(0),DISP=SHR //C2UNL10 DD DSN=SYSSA.RACF.PR1W.ZSECUNLD.DAILY,DISP=SHR //C2UNL11 DD DSN=SYSSA.RACF.PR1X.ZSECUNLD.DAILY,DISP=SHR //C2UNL12 DD DSN=SYSSA.RACF.PR1Y.ZSECUNLD.DAILY,DISP=SHR //C2UNL13 DD DSN=SYSSA.RACF.PR1Z.ZSECUNLD.DAILY,DISP=SHR //C2UNL20 DD DSN=SYSSA.RACF.TSTPLEX.ZSECUNLD.DAILY,DISP=SHR //*C2UNL30 DD DSN=SYSSA.RACF.HALPLEX.ZSECUNLD.DAILY,DISP=SHR //C2UNL40 DD DSN=SYSSA.RACF.SDMPLEX.ZSECUNLD.DAILY,DISP=SHR //C2UNL50 DD DSN=SYSSA.RACF.TSAPLEX.ZSECUNLD.DAILY,DISP=SHR //C2UNL60 DD DSN=SYSSA.RACF.DV2W.ZSECUNLD.DAILY,DISP=SHR //C2UNL61 DD DSN=SYSSA.RACF.DV2X.ZSECUNLD.DAILY,DISP=SHR //C2UNL62 DD DSN=SYSSA.RACF.DV2Y.ZSECUNLD.DAILY,DISP=SHR //C2UNL63 DD DSN=SYSSA.RACF.DV2Z.ZSECUNLD.DAILY,DISP=SHR //C2UNL70 DD DSN=SYSSA.RACF.TDAPLEX.ZSECUNLD.DAILY,DISP=SHR //C2UNL80 DD DSN=SYSSA.RACF.SDAPLEX.ZSECUNLD.DAILY,DISP=SHR //C2UNL90 DD DSN=SYSSA.RACF.TSBPLEX.ZSECUNLD.DAILY,DISP=SHR //***************************************** //* Standard profile for zSecure Suite run //***************************************** //CKRSPROF DD DATA,DLM='\/' SIMULATE ACCESS_FALLBACK_DEFAULT PRINT DD=CKREPORT SUP MSG=(2226,27,28,29,1788,286,293); IMBED MEMBER=CKRXDEF1 NOLIST \/ //* //SYSIN DD DATA,DLM='\/' /* zSecure Unload: Daily - All Systems */ ALLOC TYPE=UNLOAD DD=C2UNL00 COMPLEX=PRD ALLOC TYPE=UNLOAD DD=C2UNL10 COMPLEX=PR1W ALLOC TYPE=UNLOAD DD=C2UNL11 COMPLEX=PR1X ALLOC TYPE=UNLOAD DD=C2UNL12 COMPLEX=PR1Y ALLOC TYPE=UNLOAD DD=C2UNL13 COMPLEX=PR1Z ALLOC TYPE=UNLOAD DD=C2UNL20 COMPLEX=TST /* ALLOC TYPE=UNLOAD DD=C2UNL30 COMPLEX=HAL */ ALLOC TYPE=UNLOAD DD=C2UNL40 COMPLEX=SDM ALLOC TYPE=UNLOAD DD=C2UNL50 COMPLEX=TSA ALLOC TYPE=UNLOAD DD=C2UNL60 COMPLEX=DV2W ALLOC TYPE=UNLOAD DD=C2UNL61 COMPLEX=DV2X ALLOC TYPE=UNLOAD DD=C2UNL62 COMPLEX=DV2Y ALLOC TYPE=UNLOAD DD=C2UNL63 COMPLEX=DV2Z ALLOC TYPE=UNLOAD DD=C2UNL70 COMPLEX=TDA ALLOC TYPE=UNLOAD DD=C2UNL80 COMPLEX=SDA ALLOC TYPE=UNLOAD DD=C2UNL90 COMPLEX=TSB /* zSecure CKFREEZE Daily - All Systems */ alloc type=CKFREEZE DD=C3IOC00 COMPLEX=PRD /* alloc type=CKFREEZE DD=C3IOC01 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC02 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC03 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC04 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC05 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC06 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC07 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC08 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC09 COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC0A COMPLEX=PRD alloc type=CKFREEZE DD=C3IOC0B COMPLEX=PRD */ alloc type=CKFREEZE DD=C3IOC10 COMPLEX=PR1W alloc type=CKFREEZE DD=C3IOC11 COMPLEX=PR1X alloc type=CKFREEZE DD=C3IOC12 COMPLEX=PR1Y alloc type=CKFREEZE DD=C3IOC13 COMPLEX=PR1Z alloc type=CKFREEZE DD=C3IOC20 COMPLEX=TST alloc type=CKFREEZE DD=C3IOC21 COMPLEX=TST alloc type=CKFREEZE DD=C3IOC22 COMPLEX=TST alloc type=CKFREEZE DD=C3IOC23 COMPLEX=TST /* alloc type=CKFREEZE DD=C3IOC30 COMPLEX=HAL alloc type=CKFREEZE DD=C3IOC31 COMPLEX=HAL alloc type=CKFREEZE DD=C3IOC32 COMPLEX=HAL alloc type=CKFREEZE DD=C3IOC33 COMPLEX=HAL */ alloc type=CKFREEZE DD=C3IOC40 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC41 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC42 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC43 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC44 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC45 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC46 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC47 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC48 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC49 COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC4A COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC4B COMPLEX=SDM alloc type=CKFREEZE DD=C3IOC50 COMPLEX=TSA alloc type=CKFREEZE DD=C3IOC51 COMPLEX=TSA /* alloc type=CKFREEZE DD=C3IOC52 COMPLEX=TSA */ alloc type=CKFREEZE DD=C3IOC60 COMPLEX=DV2W alloc type=CKFREEZE DD=C3IOC61 COMPLEX=DV2X alloc type=CKFREEZE DD=C3IOC62 COMPLEX=DV2Y alloc type=CKFREEZE DD=C3IOC63 COMPLEX=DV2Z alloc type=CKFREEZE DD=C3IOC70 COMPLEX=TDA alloc type=CKFREEZE DD=C3IOC71 COMPLEX=TDA alloc type=CKFREEZE DD=C3IOC72 COMPLEX=TDA alloc type=CKFREEZE DD=C3IOC80 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC81 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC82 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC83 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC84 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC85 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC86 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC87 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC88 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC89 COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC8A COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC8B COMPLEX=SDA alloc type=CKFREEZE DD=C3IOC90 COMPLEX=TSB /* alloc type=CKFREEZE DD=C3IOC91 COMPLEX=TSB */ /* zSecure Access Monitor 18 month files - All Systems */ ALLOC TYPE=ACCESS DD=C1ACC00 COMPLEX=PRD ALLOC TYPE=ACCESS DD=C1ACC10 COMPLEX=PR1W ALLOC TYPE=ACCESS DD=C1ACC11 COMPLEX=PR1X ALLOC TYPE=ACCESS DD=C1ACC12 COMPLEX=PR1Y ALLOC TYPE=ACCESS DD=C1ACC13 COMPLEX=PR1Z ALLOC TYPE=ACCESS DD=C1ACC20 COMPLEX=TST /* ALLOC TYPE=ACCESS DD=C1ACC30 COMPLEX=HAL */ ALLOC TYPE=ACCESS DD=C1ACC40 COMPLEX=SDM ALLOC TYPE=ACCESS DD=C1ACC50 COMPLEX=TSA ALLOC TYPE=ACCESS DD=C1ACC60 COMPLEX=DV2W ALLOC TYPE=ACCESS DD=C1ACC61 COMPLEX=DV2X ALLOC TYPE=ACCESS DD=C1ACC62 COMPLEX=DV2Y ALLOC TYPE=ACCESS DD=C1ACC63 COMPLEX=DV2Z ALLOC TYPE=ACCESS DD=C1ACC70 COMPLEX=TDA ALLOC TYPE=ACCESS DD=C1ACC80 COMPLEX=SDA ALLOC TYPE=ACCESS DD=C1ACC90 COMPLEX=TSB n type=RACF_ACCESS name=CTBYPRFL nodetailinherit required nodup, , st="Permit and UACC usage, Access monitor records for any permission" /* Generated by CKRP3AM4 */ define count_suc(7,"Allowed",udec$abbr,bw,noprop) sum(access_count_suc) define count_vio(5,"Deny",udec$abbr,bw,noprop) sum(access_count_vio) define count_unk(5,"Unexp",udec$abbr,bw,noprop) sum(access_count_unk) define lastuse(7,"LastUse",noprop) max(access_lastuse) define firstuse(7,"Firstuse",noprop) min(access_lastuse) define prof#(5,"Prof",dec,bw,noprop) sumcount define auth#(5,"Auth",dec,bw,noprop) count define Miss#(7,"Missing",dec,noprop) count where (proftype="missing"C) define Pres#(8,"Permits",dec,noprop) count where (proftype<>"missing"C) define Perm#(8,"Permits and UACC",dec,noprop) count select raclist_merge=no class<>group proftype<>GLOBAL summary, id, class(nd), profile(nd), lastuse(key,"Last-Used",9), access_intent_max_suc("Access-Used",12,max), access("Access-Allowed",14), count_suc(key), count_vio(key), class(pas,key), profile(pas,key,150,wrap) \/ /*