Ron, With regard to "AFAIK it's been a long time since RACF had any sort of special security rating, and even then you had to disconnect the network", Since z/OS 1.6 RACF has had CAPP EAL 3+ certification, and LSP EAL 3+ certification. Your above comment relates to the old DOD B1 rating that RACF, with a specific set of hardware devices and software service levels, and multi-level security (MLS, ie labeling, levels and categories) active, received in the early 90's. The old "Orange Book" ratings are outdated, and have been replaced by the EAL Common Criteria. For more info, see: http://www-03.ibm.com/systems/z/security/ccs_certification.html
Wayne Driscoll Product Developer JME Software LLC NOTE: All opinions are strictly my own. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Ron Hawkins Sent: Thursday, January 31, 2008 1:31 AM To: [email protected] Subject: Re: DB2 queries without using MF. Lars, Then we better write off z/OS NFS right now... If Shai can provide a call to RACF via the host side client, then what is the big deal! And if you take a look around there are plenty of publicly listed companies around the world that fully comply with SOX or BASEL II, but have never owned or plan to own a MF. AFAIK it's been a long time since RACF had any sort of special security rating, and even then you had to disconnect the network Ron > > A product such as yours is thus unlikely to be allowed into the > data center of a large (publicly traded) company or a company in > the Health Care industry. > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
