On 6/17/2005 12:29 PM, Bruce Black wrote:
Can anyone help me out how to check when a module was last executed (with
date/time, jobname...) via batch (or even CICS)? It is because I want to
ensure all modules within that loadlib were run (tested).
This question comes up periodically. Sorry, standard MVS has no way to
audit the use of load modules. You can identify the programs that
appeared on EXEC PGM= statements from SMF data, but internally called
load modules are not recorded anywhere.
You can use the PROGRAM class in RACF to audit use of load modules or
program objects.
RDEFINE PROGRAM name ADDMEM('library'//NOPADCHK) +
UACC(READ) AUDIT(ALL(READ))
You also need to have specified SETR WHEN(PROGRAM), and after defining
the profiles you need SETR WHEN(PROGRAM) REFRESH.
This will make the programs eligible to access data sets via PADS
(Program Access to Data Sets), though, and so these should be programs
that you trust to behave non-maliciously.
Walt Farrell, CISSP
z/OS Security Design, IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
