Configure Security With All Security Products
To configure server security with RACF, eTrust CA-ACF2, or eTrust CA-Top Secret:
- Procedure
- Log on to TSO using an ID with read access to the BPX.FILEATTR.APF facility class.
- Using the name of the actual EDAHOME directory, change
file attributes by entering the following TSO commands in ISPF Command
Shell (option 6):
OSHELL extattr +a /u/iadmin/ibi/srv93/home/bin/tscom300.out OSHELL extattr +a /u/iadmin/ibi/srv93/home/bin/tsqprx.out
- Verify your changes by issuing the following commands:
OSHELL ls -E /u/iadmin/ibi/srv93/home/bin/tscom300.out OSHELL ls -E /u/iadmin/ibi/srv93/home/bin/tsqprx.out
The extended attributes portion of the output should be a-s-.
- The libraries allocated to STEPLIB in IRUNJCL must be APF-authorized. Any non-APF-authorized libraries must be allocated to the TASKLIB DDNAME.
- Test server security by repeating the process described in Testing the New or Upgraded Installation/Configuration.