IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  zSecure access monitor

    Posted Fri December 13, 2019 11:43 AM
    What are some the reasons a RACF id accessing a program in a LNKLSTed dataset would not appear on a zSecure access monitor report; reporting  access to that dataset?  Missing some ids that I think should be on report... scratching my head...

    ------------------------------
    Peter Ten Eyck
    ------------------------------


  • 2.  RE: zSecure access monitor

    Posted Fri December 13, 2019 11:52 AM
    oops, sorry for the redundant post, please ignore.

    ------------------------------
    Peter Ten Eyck
    ------------------------------

    Original Message


  • 3.  RE: zSecure access monitor

    Posted Fri December 13, 2019 03:45 PM
    Ah, you used 2 words that you did not use in your previous post: program and LNKLSTed.
    If a program was loaded from Linklist, and not from STEPLIB, the data set was not opened, no RACF access check performed, and therefore no ACCESS MONITOR event recorded.

    ------------------------------
    Rob van Hoboken
    ------------------------------

    Original Message


  • 4.  RE: zSecure access monitor

    Posted Fri December 13, 2019 03:51 PM

    Yes, I had my suspicions about that... if a program is load from the LNKLST, no access for its PDS is recorded?

     

    //* Peter Ten Eyck

    //* Senior Systems Programmer

    //* American National

    //

     




    Original Message


  • 5.  RE: zSecure access monitor

    Posted Mon December 16, 2019 08:02 AM
    That's right.  Linklist data sets are opened at IPL, or after an activate, so RACF does not check access to the DATASET profile for each program load.

    ------------------------------
    Rob van Hoboken
    ------------------------------

    Original Message


  • 6.  RE: zSecure access monitor

    Posted Mon December 16, 2019 09:38 AM

    Thanks for information, that clears things up for me on this issue.

     

    //* Peter Ten Eyck

    //* Senior Systems Programmer

    //* American National

    //

     




    Original Message


Related Content