Glad to see you still participating Walt, post-retirement. _________________________________________________________________ Dave Jousma Assistant Vice President, Mainframe Services [email protected] 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717
-----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Walt Farrell Sent: Tuesday, August 21, 2012 11:43 AM To: [email protected] Subject: Re: zFS auditfid support On Mon, 20 Aug 2012 13:53:01 -0700, retired mainframer <[email protected]> wrote: >Both MXG (which requires SAS) and RACFICE (from SAMPLIB) provide the >capability to adjust the selection criteria to anything you wish. > >But this assumes the data of interest is actually recorded. I found >references to auditid in the BPXYATTR and BPXYSTAT macros. I could not >find any reference in the SMF type 80 record description. I -think- it would be extended relocate section #264 (x'108'), listed in the RACF documentation for the type 80 record as File Identifier (16 bytes, binary), and in the IRRADU00 output as the File ID (e.g, FACC_FILE_ID, 32 bytes character in the "check file access record extension"). I have no way to check that, but a question on RACF-L might get a response from a developer or Level 2. Or someone with access to SMF records and especially an ICH408I containing the audit ID should be able to confirm it. -- Walt ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
