Hi,There is need to "lock down" multiple levels on system.
I'm wondering is it possible to use C4R.DATASET.=NOCHANGE.** APPLDATA('LEVEL=99') functionality to solve issue:
Like C4R.DATASET.=NOCHANGE.** APPLDATA('LEVEL=99, 44,32')
Already tested racfvars in C4R.DATASET.=NOCHANGE.&locked APPLDATA('LEVEL=99') and
Thanks Rob for your answer.I did more investigations and manages to lock most of profiles.But it seems that I need to open PMR anyway.
In case there is Generic fully qualified profile, C4R.DATASET.=NOCHANGE.dsname will not be effective, even without Level.
For example: DATASET SYS1.LPAR.LINKLIB (G), profile C4R.DATASET.=NOCHANGE.SYS1.** <- this will lock all SYS1.** or SYS1.LPAR.** dataset profiles but not fully qualified profile. Also C4R.DATASET.=NOCHANGE.SYS1.LPAR.LINKLIB doesn't bite.
I'm using zSecure 2.4.0