Roger,

No problem, so that leaves an Operator or someone authorized to issue the 
command.
Another possibility would be a software product, maybe. 

If you have you sys logs you could try to find who issued the command

Scott ford
www.identityforge.com

Tell me and I'll forget; show me and I may remember; involve me and I'll 
understand. - Chinese Proverb


On Nov 6, 2012, at 3:26 PM, Roger Lowe <[email protected]> wrote:

> Scott,
>        I should have been a little more clear on my original post - the 
> BPXRMxx parmlib member has the file being mounted in RW mode, but somehow 
> during normal operations, the file mount attribute got changed from RW to R. 
> I can't use the SMF Type 92 records as they are currently not being recorded 
> :(
> I have also looked at the Type 80 records and RACF Event Codes 44 and 55 
> (Mount and UnMount) but that has also been unsuccessful
> 
> Roger
> 
> On Tue, 6 Nov 2012 10:21:29 -0500, Scott Ford <[email protected]> wrote:
> 
>> Roger,
>> 
>> If Its the member of parmlib, look at the security subsystems definitions 
>> for that library, I.e.; DATASET
>> 
>> Scott ford
>> www.identityforge.com
>> 
>> Tell me and I'll forget; show me and I may remember; involve me and I'll 
>> understand. - Chinese Proverb
>> 
>> 
>> On Nov 5, 2012, at 8:50 PM, Roger Lowe <[email protected]> wrote:
>> 
>>> Hi,
>>>  is there an easy way to identify who might have changed the MOUNT 
>>> attribute of a zFS from RW to R?
>>> 
>>> Thanks, Roger
>>> 
>>> ----------------------------------------------------------------------
>>> For IBM-MAIN subscribe / signoff / archive access instructions,
>>> send email to [email protected] with the message: INFO IBM-MAIN
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to