On Thu, 21 Nov 2013 08:32:32 -0600, Elardus Engelbrecht 
<[email protected]> wrote:

>Tim Brown wrote:
>
>>Which smf records will give detail on creates/updates/deletes for racf 
>>discrete/generic profiles
>
>Others said SMF record type 80, but there are some caveats.
>
>By default, you will see only violations. 
>
>If you want to record successfull attempts too, be sure to specify 
>audit(all(READ))  for your datasets and check out 
>LOGOPTIONS(ALWAYS) for datasets.

Not quite right, Elardus, if he asked the right question. He asked about 
creating/updating/deleting *profiles*, not resources. 

The audit controls for actions against profiles (e.g., via RACF commands) are 
SETROPTS AUDIT(classname) and SETROPTS SAUDIT.

-- 
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to