Dennis, Add CA Endevor, releases earlier than R12, to Sam's list of potential TEMPDSN problem products. See article "TEMPDSN and CA-Endevor" in the April 2009 issue of our RSH RACF Tips Newsletter, a copy of which is available via the following URL:
http://www.rshconsulting.com/racfres.htm One reason for activating the TAPEVOL class would be to implement restrictions on the use of Bypass Label Processing (BLP) using the FACILITY class profile ICHBLP when your tape management system is IBM's DFSMSrmm. However, if you activate tape protection using PARMLIB DEVSUPxx parameter TAPAUTHDSN, it isn't necessary to activate TAPEVOL to enable use of the ICHBLP profile. Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel www.rshconsulting.com --------------------------------------------------------------------- 2011 RACF Training > Audit for Results - Boston - APR 12-14 > Intro & Basic Admin - Boston - MAY 10-12 Visit our website for registration & details --------------------------------------------------------------------- -----Original Message----- Date: Fri, 18 Feb 2011 20:25:12 +0000 From: "Givens, Dennis W." <[email protected]> Subject: RACF Resource Classes I am working on the resolution of exceptions produced by the recently activated Health Checker feature on a Z/OS 1.10 system. Specifically the following 2 checks: CHECK(IBMRACF,RACF_TAPEVOL_ACTIVE) Check Severity: Medium IRRH229E The class TAPEVOL is not active. Explanation: The class is not active. IBM recommends that the security administrator at your installation activate this class and define in it the profiles to properly protect your system. CHECK(IBMRACF,RACF_TEMPDSN_ACTIVE) Check Severity: Medium IRRH229E The class TEMPDSN is not active. Explanation: The class is not active. IBM recommends that the security administrator at your installation activate this class and define in it the profiles to properly protect your system. I am contemplating activating both of these resource classes but have no immediate plans for using them in any profiles. My concern is that the activation of these classes will in itself cause me problems. Any experiences or insight would be much appreciated. Signed A Novice RACF Administrator ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
