Mauri Kanter wrote:

>We are getting closer ... Seems MVSADMIN.XCF.CFRM is related to the ability
to define something in the CFRM dataset ...

>I need to understand how to protect IXCCREAT

There is nothing about SAF or RACF for that macro IXCCREAT or the XCF 
group described. Not every IXC* macros have a paragraph about SAF 
protection according to the same book I mentioned earlier. 

(I could have missed something while RTFM...)

It seemed to me the USAGE of the services are somewhat protected.

What you can try, enable logging for all access attempts for RACF class 
FACILITY, maybe on a test system, put in a temporary backstop profile ** 
with WARNING on. 

Then you can search the SYSLOG or SMF for any clues. Maybe you'll discover 
a profile used by that macro. Remember to remove that backstop profile.

Or write your own RACROUTE service.

HTH!

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to