You can do it in flight, but at some risk if you do it in place. The safest way 
is to link it into a separate library, activate dynamic linklist and then 
loggon.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3

________________________________________
From: IBM Mainframe Discussion List [[email protected]] on behalf of 
Lennie Dymoke-Bradshaw [[email protected]]
Sent: Tuesday, August 22, 2023 8:07 AM
To: [email protected]
Subject: Re: Updating IEEMB846

I am trying to determine which users are using the TSO CONSOLE command.

This is controlled one of those TSOAUTH checks that are done at LOGON time
and the results of the RACF check are stored in the PSCB in bit PSCBCNAU. So
many normal RACF checking monitors (such as zSecure Access Monitor) are of
no use. I want to know who is using it, rather than who can use it.



The TSO command table in IEEMB846 is used by the TMP and by ISPF to record
commands issued in SMF type 32 records. (ISPF uses an interface via SVC
109.) However, IEEMB846 is old. In fact it is so old that it does not
contain TESTAUTH, PARMLIB, CONSOLE, ISPF. The source is in
SYS1.SAMPLIB(SMFTSOCM).  I wish to update IEEMB846 to include the CONSOLE
command. IEEMB846 is in a distinct load module in SYS1.LINKLIB. So can I
update this table in flight, or do I need to IPL?



Thanks,

Lennie













----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to