IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Command Logger and IRRSEQ00

    Posted 03/11/20 04:40 PM
    We have a inhouse solution and a vendor solution that will be submitting RACF commands via IRRSEQ00.   How they use command logger to add ticket/description information to the RACF Commands?   Is there a way for them to invoke CKXLOGID SET command?


    ------------------------------
    Linnea Sullivan
    ------------------------------


  • 2.  RE: Command Logger and IRRSEQ00

    Posted 03/17/20 02:29 PM
    Is this a topic I need to open an IBM Case to discuss?

    ------------------------------
    Linnea Sullivan
    ------------------------------



  • 3.  RE: Command Logger and IRRSEQ00

    Posted 03/18/20 04:39 AM

    As you know, commands executed via R_admin are executed in the RACF address space. And the RACF address space only accepts a limited number of (RACF) commands.  Now, we could design a process where any TSO user could specify a ticket number for some other address space, or for any RACF command running under its userid. But then, you'd lose the ability to run concurrent command streams through the zSecure Server, or multiple concurrent batch jobs.

    And of course, for commands executing in the RACF address space, you would be limited to zSecure Command Verifier logging of the RACF commands.



    ------------------------------
    Guus Bonnes
    ------------------------------



Related Content