I would guess that your auditor is assuming that the ability to stop the RACF subsystem will stop the security system. This is false. Once a system is IPL'd with RACF, it is extremely difficult to to stop RACF from processing security calls, and even if RACF did go into "failsafe" mode, a WTOR will be issued for most RACF calls, so the system will not be processing normally. Wayne Driscoll Product Developer Western Metal Supply NOTE: All opinions are strictly my own.
-----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Irwin M. Deutsch Sent: Tuesday, September 13, 2005 2:12 PM To: [email protected] Subject: RACF Stop/Start? Hi, Our auditor has asked why have not protected the command to 'stop' racf. Neither I nor our MVS gurus know of such an animal. I found some STOP for RRSF in System Command manual, but that's just some part of RACF. Any ideas on what our auditor is talking about? Thanks, Irwin Deutsch AIG Sunamerica (DB2/CICS guy tinkering with RACF) ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
