IBM Security Z Security

 View Only
Expand all | Collapse all

CARLa report of Datasets with an HLQ that is an ID that contains a TSO segment.

  • 1.  CARLa report of Datasets with an HLQ that is an ID that contains a TSO segment.

    Posted Thu March 14, 2024 04:58 PM

    I'm looking for information about creating a CARLa report of Datasets with an HLQ that is an ID that contains a TSO segment.



    ------------------------------
    Jamie Gibson
    ------------------------------


  • 2.  RE: CARLa report of Datasets with an HLQ that is an ID that contains a TSO segment.

    Posted Thu March 14, 2024 05:40 PM

    Hi Jamie,

    I can interpret that request in a number of ways.

    I give an example here of generating a bunch of reports for the data sets belonging to user IDs that contain a TSO segment.

    option dd=ckr2pass                                               
n type=system outlim=1 nopage                                    
list "def type=dsn hlq as word(dsn,1,'.')"                       
n type=racf nopage outlim=10; s c=user s=tso;                    
sortlist "n type=dsn empty='No data sets for " | key(0) |,       
  "' outlim=10; s hlq=" | key(0) | "; sortlist hlq(t) dsn"

    Note that this is an example. If you would want to run this "for real" you would probably remove both of the OUTLIM specifications. Here I limit both the number of IDs to investigate and the number of data sets listed per ID to 10.

    This is written as a first level query that you could put into CO.C (aka CARLA) that would generate a bunch of second-level queries into CKR2PASS. You could PF3 out and 'R'un CKR2PASS.

    I first generate a DEFINE statement to obtain the HLQ of a data set from the DSN field in TYPE=DSN. (LIST output is written immediately, SORTLIST later.)
    (The raw HLQ. Note that the QUAL field in TYPE=DSN gives you the HLQ that is used for the security check, but this could have been changed by the naming exit etc.)

    Then I use TYPE=RACF to look for USERs with a TSO segment. And then I generate queries to either list the data sets with each HLQ, or print a message that such data sets do not exist. I use a T(ITLE) modifier to put the ID into the report title.

    Output might look like:

    000001 1D A T A   S E T   N A M E S    
000002                                 
000003                                 
000004  No data sets for ADM#SRV       
000005 1D A T A   S E T   N A M E S    
000006  AEITH                          
000007                                 
000008  Data set name                  
000009  AEITH.JCL.CNTL

    Of course, you might be looking for quite a different kind of report, but perhaps this gives you some ideas. :-)

    Regards,



    ------------------------------
    Jeroen Tiggelman
    IBM - Software Development Manager IBM Security zSecure Suite
    Delft
    ------------------------------

    Original Message


  • 3.  RE: CARLa report of Datasets with an HLQ that is an ID that contains a TSO segment.

    IBM Champion
    Posted Fri March 15, 2024 12:57 PM
    Edited by Rob van Hoboken Fri March 15, 2024 02:40 PM

    Note, newlist type=DSN requires that you have both the RACF input source and a corresponding CKFREEZE selected in SE.1 with the same COMPLEX name.

    Now I wonder, if we change the specification of the report a bit, to state "show DASD data sets where the HLQ corresponds to an ID with a TSO segment that has been used at least once," could we use ID lookup to a field in the TSO segment?

    newlist type=dsn
      s exists(qual:tlproc)
      sortlist dsn vol

    ------------------------------
    Rob van Hoboken
    ------------------------------