On Thu, 21 Nov 2013 08:32:32 -0600, Elardus Engelbrecht <[email protected]> wrote:
>Tim Brown wrote: > >>Which smf records will give detail on creates/updates/deletes for racf >>discrete/generic profiles > >Others said SMF record type 80, but there are some caveats. > >By default, you will see only violations. > >If you want to record successfull attempts too, be sure to specify >audit(all(READ)) for your datasets and check out >LOGOPTIONS(ALWAYS) for datasets. Not quite right, Elardus, if he asked the right question. He asked about creating/updating/deleting *profiles*, not resources. The audit controls for actions against profiles (e.g., via RACF commands) are SETROPTS AUDIT(classname) and SETROPTS SAUDIT. -- Walt ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
