You indicated RACF which sometimes people use generically for SAF). If you have Top Secret or ACF2 there is an additional SMF record (type 230 IIRC). TSS and ACF2 also generate the type 80s for consistency.
Matt Hogstrom m...@hogstrom.org +1-919-656-0564 PGP Key: 0x90ECB270 Facebook <https://facebook.com/matt.hogstrom> LinkedIn <https://linkedin/in/mhogstrom> Twitter <https://twitter.com/hogstrom> “It may be cognitive, but, it ain’t intuitive." — Hogstrom > On Mar 19, 2021, at 7:14 PM, Feller, Paul > <000002fc94e14c43-dmarc-requ...@listserv.ua.edu> wrote: > > Pierre, have you tried to look at the SMF Record Type 80 (Security Product > Processing) record for the information you want? > > > > Thanks.. > > Paul Feller > GTS Mainframe Technical Support > > -----Original Message----- > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of > Pierre Fichaud > Sent: Friday, March 19, 2021 4:23 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: DB/2 and CICS security [EXTERNAL] > > If a security (RACF) violation occurs in a CICS region, where does the > violation get reported? > I couldn't find anything in the CICS SMF records but I'll look again. > Do they get reported in the JESMSGLG or in a CICS ? > Does a CICS exit need to be installed? > There's tons of documentation to go through. > I figured it might be faster to use this forum to get an asnwer. > > I don't have a CICS system to play with at the moment. > > I need the same kind of info for DB/2. > I've yet to check the SMF record layouts. > > Again I don't have a DB/2 system to play with. > > Thanks in advance, Pierre. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > Please note: This message originated outside your organization. Please use > caution when opening links or attachments. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
