IBM Security Z Security

 View Only
  • 1.  Access Monitor - Program Class

    Posted Wed October 20, 2021 12:48 PM
    We would like to clean up our PROGRAM class profiles of potentially obsolete members (datasets).   When I goto AM.6 and select the PROGRAM class, there seems to be no data for anything in the program class.

    Is there a way with Access Monitor to tell which members in the PROGRAM class that we can delete because they are no longer used?

    Even when I go to AM.1 I see no data for the program class.

    ------------------------------
    Linnea Sullivan
    ------------------------------


  • 2.  RE: Access Monitor - Program Class

    Posted Wed October 20, 2021 01:06 PM
    Hi, that's a zSecure 2.5 feature. You need collect data with zSecure 2.5 for some time ...

    ------------------------------
    Hans Schoone
    Chief Architect zSecure
    IBM
    Delft
    ------------------------------



  • 3.  RE: Access Monitor - Program Class

    IBM Champion
    Posted Fri October 22, 2021 04:16 AM
    If you wanted to delete members from PROGRAM profiles because the dsname in those members doesn't exist, you can use VERIFY PROGRAM (in the AU.V menu).  If you wanted to check that actual programs in those libraries are covered by the program profile, you can use VERIFY PROGRAMEXISTS.

    These 2 options use CKFREEZE to ascertain existence of data sets on the volume indicated by the program profile, and member names when directory information has been collected using PDS=YES, or PDSDIR=dsname for non-system (e.g., non-APF) data sets.

    The Access Monitor option in 2.5.0 helps you determine if the profile entries are (un-)used, even if the dsname and the member still exists.

    ------------------------------
    Rob van Hoboken
    ------------------------------