Re: RSU or maintenance level on a system

[Juergen Kehr]

I totally agree with some of the previous postings, a RSU or PUT level is no 
really meaningful value, to identify a specific maintenance level. Nevertheless 
a while ago a similar task occured on my desk: We should verify that 
security/integrity PTFs, which are named in IBM's security portal are installed 
in our systems. On our production systems we use libraries which are copies of 
the SMP/E managed target libraries. So we built the following process to solve 
this problem.

For any relevant PTF we determine one module the PTF changes, we name it 
reference module, for example it may be a LMOD or an HFS element, for this 
module we determine a hash value, which is a SHA-1 value or a CKSUM for HFS 
elements. This value is stored in a DB2 table. When the new maintenance level 
is rolled out, on any system we determin the hash value again and compare it to 
the value in the table. When the value matches for all our systems, we can 
build a report which says that the specific security PTF is active on all our 
systems.

Regards
Juergen

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Roger Lowe]

On Mon, 21 Sep 2015 16:02:42 -0400, John Eells  wrote:

>Lopez, Sharon wrote:
>> I already posted this question to IBM but wanted to find out if others are 
>> getting this request from their auditors.
>>
>> Our auditors want to be able to display the RSU or maintenance level of our 
>> z/OS system.  To my knowledge, there is no way to do that (IBM has also 
>> agreed).  Does anyone know if this is possible and are you getting the same 
>> request from your auditors.? Keep in mind that our auditors do know z/OS or 
>> mainframe.  It sounds like they are used to seeing displays on other 
>> platforms with this information with release and fix level.
>
>
Although not an exact science, at our site, we use a couple of System Symbols - 
= "PUT1505" 
= "RSU1506"  

Then the sysprog that is installing maintenance into the z/OS environment 
updates these values to the approximate RSU/PUT level that has been installed 
into that particular Target Zone.  We then have a REXX exec that does the 
following

PUT=mvsvar('symdef','putlvl')   
RSU=mvsvar('symdef','rsulvl')   
RESBLD=mvsvar('symdef','reslvl')
ZOSLVL=mvsvar('SYSOPSYS')   
RESDATE = Translate('12/34/56',RESBLD,'123456') 
Say 'z/OS PUT Level (Approx) : 'PUT 
Say 'z/OS RSU Level (Approx) : 'RSU 
Say 'z/OS SYSRES Build Date (dd/mm/yy) : 'RESDATE   
Say 'z/OS V.R.M and FMID : 'ZOSLVL  

Hope that helps.

Roger

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[John Eells]

Lopez, Sharon wrote:

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.



In scanning this (long) thread, what nobody seems to have explained is 
*why* there is no absolute "RSU level."  You might understand this 
perfectly but I'm not sure all readers of the list do because it seems 
to come up from time to time.


RSU is a selection criterion used by SMP/E to determine what PTFs are 
candidates for installation. By default, SMP/E filters that list by 
excluding unresolved or unresolvable PTFs in error (PEs), and if you ask 
nicely (using GROUPEXTEND, which you should use) it adds to that list by 
including PE fixes and HIPER fixes.


The combination of products you have installed, HOLDDATA currency and 
(received) PTF availability make the actual PTFs that will be installed 
different for everyone on a practical level.


Look at it this way: If two people have identical products (version, 
realease, modification level, service level) installed and used 
identical levels of HOLDDATA (obtained on the same date after the time 
of day it's updated) and identical sets of received PTFs, they would 
have the same PTFs installed. Otherwise, not. Practically speaking, the 
smart money is on "not."  It's a fast-moving target.


The best you can do is tell them "the last time we installed service, we 
specified these RSU levels." (Note: This is why Level 2 always asks for 
information about particular PTFs or verifies which are installed using 
the dump.)


Further, there is no way to tie an SMP/E zone or set of SMP/E zones to a 
running system other than system programmer procedures and discipline.


Based on the above it's hard to understand why we would write a display 
command to show something as fuzzy as an "RSU level"...but you could 
always ask formally if you wish.


--
John Eells
z/OS Technical Marketing
IBM Poughkeepsie
ee...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Tim Deller]

You can get a good idea of your RSU level from SMPE panel 3.3 
Enter your target zone and press enter.
The highest RSU listed is probably your maintenance level.
You can type S beside the RSU to see all the PTF's applied with that RSU.
Thanks,
Tim Deller

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[John McKown]

On Thu, Sep 17, 2015 at 8:51 AM, retired mainframer <
retired-mainfra...@q.com> wrote:

> > -Original Message-
> > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> > On Behalf Of Lizette Koehler
> > Sent: Wednesday, September 16, 2015 7:10 AM
> > To: IBM-MAIN@LISTSERV.UA.EDU
> > Subject: Re: RSU or maintenance level on a system
> >
> > Or another Technique could be to use the CVTUSER field.  Zap it with a
> > Usermod
> > to include the RSU with your live system
> > 00D4  212 Signed   4 CVTUSER- FIELD AVAILABLE TO USER
> >
> > Thought I do like the SYMBOLS option, but it is way too easy to change.
> > Zapping
> > the CVTUSER would take more effort and the USERMOD would remind you
> > to do it.
>
> Don't most shops use CVTUSER for something useful.  In our case, it pointed
> to the control table common to all our exits (SMF, SUBMIT, RACF, etc).
>

​I have avoided CVTUSER "since forever" because I've had OEM products (long
ago) try to use it. The same with TCBUSER. In today's environment, I use
the SSVT (SubSystem Vector Table)​ to anchor things. And I dynamically
create my subsystem if it doesn't already exist. Of course, this requires
that the Subsystem name not be in use by others. I generally use something
"silly". Like, for instance, BEER. (because many people like BEER). Or just
use something that is unlikely to be duplicated (and essentially
"meaningless"), such as O845.



>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>



-- 

Schrodinger's backup: The condition of any backup is unknown until a
restore is attempted.

Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be.

He's about as useful as a wax frying pan.

10 to the 12th power microphones = 1 Megaphone

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[retired mainframer]

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of John McKown
> Sent: Wednesday, September 16, 2015 6:11 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> On Wed, Sep 16, 2015 at 7:27 AM, Lopez, Sharon <sharon.lo...@nc.gov>
> wrote:
> 
> > I already posted this question to IBM but wanted to find out if others are
> > getting this request from their auditors.
> >
> > Our auditors want to be able to display the RSU or maintenance level of
> > our z/OS system.  To my knowledge, there is no way to do that (IBM has
> also
> > agreed).  Does anyone know if this is possible and are you getting the same
> > request from your auditors.? Keep in mind that our auditors do know z/OS
> or
> > mainframe.  It sounds like they are used to seeing displays on other
> > platforms with this information with release and fix level.
> >
> > Thank you in advance.
> >
> 
> ​z/OS is composed of many parts. What I might do would be to look at the
> SOURCEID list for your z/OS target zone. And say something like: "We are on
> z/OS 1.12 RSU 9912, plus a few (thousand) special patches"

If your auditors are anything like mine were, don't ever say patches.  For some 
reason, they assumed patches were uncontrolled.  I would say "... plus 
additional updates that IBM did not assign an RSU level to."

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[retired mainframer]

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of Ted MacNEIL
> Sent: Wednesday, September 16, 2015 6:21 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> What would the auditors gain with this knowledge?

The auditors get to keep pretending to management that they are worth the
cost.

Displaying all the SOURCEIDs lets the OP get on with real work without
having to waste a lot of time explaining why the information has no
significance.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[retired mainframer]

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of Lizette Koehler
> Sent: Wednesday, September 16, 2015 7:10 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> Or another Technique could be to use the CVTUSER field.  Zap it with a
> Usermod
> to include the RSU with your live system
> 00D4  212 Signed   4 CVTUSER- FIELD AVAILABLE TO USER
> 
> Thought I do like the SYMBOLS option, but it is way too easy to change.
> Zapping
> the CVTUSER would take more effort and the USERMOD would remind you
> to do it.

Don't most shops use CVTUSER for something useful.  In our case, it pointed
to the control table common to all our exits (SMF, SUBMIT, RACF, etc).

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Jousma, David]

IBM is correct.  No way to do that.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Blake, Daniel J [CTR]]

So give your auditors want they want using your IEASYMxx member.  Add 
"SYMDEF(='.RSU1nnn')" to it and when they ask for your RSU issue the 
"D SYMBOLS" command.  Just make sure nnn is your current RSU number.



;-D an 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Wednesday, September 16, 2015 8:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

IBM is correct.  No way to do that.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f 616.653.2717

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[van der Grijn, Bart (B)]

There's no way to display it because there's not really such a thing as a 
defined maintenance level for a z/OS system. RSU is a collection of recommended 
PTFs for a selection of products. So what would be the definition of your 
system being at a RSU level? Does it imply all the maintenance? For all the 
components? For just z/OS or also for CICS, DB2, etc? Does it imply all the 
maintenance for the previous RSU levels? 
We don't always install all the RSU PTFs because some might be in error for 
reasons we care about. Does that mean we're not at that RSU level? 
I don't see an easy way to determine it programmatically, even if there was an 
agreed definition. 

I haven't seen that specific question, but have received similar questions (ex: 
'show us you have all security patches installed'). Our reply so far has been 
to explain the RSU process and show evidence of applying the RSU maintenance on 
a regular basis (through our internal change control tool).

Bart

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Ted MacNEIL]

What would the auditors gain with this knowledge?

-
-teD
-
  Original Message  
From: Jousma, David
Sent: Wednesday, September 16, 2015 08:30
To: IBM-MAIN@LISTSERV.UA.EDU
Reply To: IBM Mainframe Discussion List
Subject: Re: RSU or maintenance level on a system

IBM is correct. No way to do that.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system. To my knowledge, there is no way to do that (IBM has also agreed). 
Does anyone know if this is possible and are you getting the same request from 
your auditors.? Keep in mind that our auditors do know z/OS or mainframe. It 
sounds like they are used to seeing displays on other platforms with this 
information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged. It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Mike Wawiorko]

Or get some auditors who understand what they are auditing.

If they don't understand z/OS they are adding no value to your business by 
pretending to audit z/OS. 
Your management will get a warm or cool feeling from what the auditors say, but 
it will say nothing meaningful about the state of your z/OS systems.
If your systems are configured in a stupidly insecure manner you do want to 
know about it don't you?

Mike Wawiorko
 Please consider the environment before printing this e-mail

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Blake, Daniel J [CTR]
Sent: 16 September 2015 14:00
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

So give your auditors want they want using your IEASYMxx member.  Add 
"SYMDEF(='.RSU1nnn')" to it and when they ask for your RSU issue the 
"D SYMBOLS" command.  Just make sure nnn is your current RSU number.



;-D an 



This e-mail and any attachments are confidential and intended solely for the 
addressee and may also be privileged or exempt from disclosure under applicable 
law. If you are not the addressee, or have received this e-mail in error, 
please notify the sender immediately, delete it from your system and do not 
copy, disclose or otherwise act upon any part of this e-mail or its attachments.

Internet communications are not guaranteed to be secure or virus-free. The 
Barclays Group does not accept responsibility for any loss arising from 
unauthorised access to, or interference with, any Internet communications by 
any third party, or from the transmission of any viruses. Replies to this 
e-mail may be monitored by the Barclays Group for operational or business 
reasons.

Any opinion or other information in this e-mail or its attachments that does 
not relate to the business of the Barclays Group is personal to the sender and 
is not given or endorsed by the Barclays Group.

Barclays Bank PLC. Registered in England and Wales (registered no. 1026167). 
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom. 

Barclays Bank PLC is authorised by the Prudential Regulation Authority and 
regulated by the Financial Conduct Authority and the Prudential Regulation 
Authority (Financial Services Register No. 122702).

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[John McKown]

On Wed, Sep 16, 2015 at 8:20 AM, Ted MacNEIL  wrote:

> What would the auditors gain with this knowledge?
>

​Knowledge? It's just _data_. Auditors, in my experience, have very little
_knowledge_. Much like government bureaucrats. ​



>
> -
> -teD
> -
>

-- 

Schrodinger's backup: The condition of any backup is unknown until a
restore is attempted.

Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be.

He's about as useful as a wax frying pan.

10 to the 12th power microphones = 1 Megaphone

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Staller, Allan]

Say what you really think John, 




On Wed, Sep 16, 2015 at 8:20 AM, Ted MacNEIL  wrote:

> What would the auditors gain with this knowledge?
>

​Knowledge? It's just _data_. Auditors, in my experience, have very little 
_knowledge_. Much like government bureaucrats. ​



>
> -
> -teD
> -
>

-- 

...  deleted text  


Maranatha! <><
John McKown


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Jousma, David]

Thinking about this some more, we save the apply listings for audit purposes.   
In our case, they want to see the progression of maintenance flowing from TECH 
to DEV, and then DEV to PROD to prove we test our maintenance.   When we do 
maintenance, we usually select RSU* or specific RSU levels amongst other 
sourceID's.I suppose you could show an auditor that information.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering
david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Wednesday, September 16, 2015 8:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

IBM is correct.  No way to do that.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f 616.653.2717

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Tom Marchant]

On Wed, 16 Sep 2015 12:27:54 +, Lopez, Sharon wrote:

>Our auditors want to be able to display the RSU or maintenance level 
>of our z/OS system.  To my knowledge, there is no way to do that 
>(IBM has also agreed).  Does anyone know if this is possible and are 
>you getting the same request from your auditors.? Keep in mind that 
>our auditors do know z/OS or mainframe.  It sounds like they are used 
>to seeing displays on other platforms with this information with release 
>and fix level.

A single maintenance level for thousands of elements that can all be 
updated independently would not be possible or meaningful. I would ask 
what the auditor was looking for. Perhaps the SMPLOG for the target 
zone would be helpful to them.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Pommier, Rex]

Devious!  I'll have to put that in my bag of tricks.  :-)  That could have 
easily worked with any auditors I've encountered in the past, but Sharon's 
auditors apparently know z/OS.  

Rex

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Blake, Daniel J [CTR]
Sent: Wednesday, September 16, 2015 8:00 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

So give your auditors want they want using your IEASYMxx member.  Add 
"SYMDEF(='.RSU1nnn')" to it and when they ask for your RSU issue the 
"D SYMBOLS" command.  Just make sure nnn is your current RSU number.



;-D an 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Wednesday, September 16, 2015 8:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

IBM is correct.  No way to do that.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f 616.653.2717

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


The information contained in this message is confidential, protected from 
disclosure and may be legally privileged.  If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful.  If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format.  Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Blake, Daniel J [CTR]]

One more thing, IBM supplies the OS information for you using   You 
cannot change it and you don't have to specify it in your IEASYMxx member.  For 
us when we enter D SYMBOLS it's:  = "Z1020100".



;-D an 

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Blake, Daniel J [CTR]
Sent: Wednesday, September 16, 2015 9:00 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

So give your auditors want they want using your IEASYMxx member.  Add 
"SYMDEF(='.RSU1nnn')" to it and when they ask for your RSU issue the 
"D SYMBOLS" command.  Just make sure nnn is your current RSU number.



;-D an 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Wednesday, September 16, 2015 8:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

IBM is correct.  No way to do that.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f 616.653.2717

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Blake, Daniel J [CTR]]

And since you document your SMP/E work you can back it up.



;-D an


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Pommier, Rex
Sent: Wednesday, September 16, 2015 9:04 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

Devious!  I'll have to put that in my bag of tricks.  :-)  That could have 
easily worked with any auditors I've encountered in the past, but Sharon's 
auditors apparently know z/OS.  

Rex

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Blake, Daniel J [CTR]
Sent: Wednesday, September 16, 2015 8:00 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

So give your auditors want they want using your IEASYMxx member.  Add 
"SYMDEF(='.RSU1nnn')" to it and when they ask for your RSU issue the 
"D SYMBOLS" command.  Just make sure nnn is your current RSU number.



;-D an 


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jousma, David
Sent: Wednesday, September 16, 2015 8:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

IBM is correct.  No way to do that.

_
Dave Jousma
Assistant Vice President, Mainframe Engineering david.jou...@53.com
1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f 616.653.2717

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN


The information contained in this message is confidential, protected from 
disclosure and may be legally privileged.  If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful.  If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format.  Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Lizette Koehler]

Or another Technique could be to use the CVTUSER field.  Zap it with a Usermod
to include the RSU with your live system
00D4  212 Signed   4 CVTUSER- FIELD AVAILABLE TO USER

Thought I do like the SYMBOLS option, but it is way too easy to change.  Zapping
the CVTUSER would take more effort and the USERMOD would remind you to do it.

Lizette


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Blake, Daniel J [CTR]
> Sent: Wednesday, September 16, 2015 6:07 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> One more thing, IBM supplies the OS information for you using   You
> cannot change it and you don't have to specify it in your IEASYMxx member.
For us
> when we enter D SYMBOLS it's:  = "Z1020100".
> 
> 
> 
> ;-D an
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Blake, Daniel J [CTR]
> Sent: Wednesday, September 16, 2015 9:00 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> So give your auditors want they want using your IEASYMxx member.  Add
> "SYMDEF(='.RSU1nnn')" to it and when they ask for your RSU issue the
> "D SYMBOLS" command.  Just make sure nnn is your current RSU number.
> 
> 
> 
> ;-D an
> 
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Jousma, David
> Sent: Wednesday, September 16, 2015 8:30 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> IBM is correct.  No way to do that.
> 
> _
> Dave Jousma
> Assistant Vice President, Mainframe Engineering david.jou...@53.com
> 1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f
> 616.653.2717
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Lopez, Sharon
> Sent: Wednesday, September 16, 2015 8:28 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: RSU or maintenance level on a system
> 
> I already posted this question to IBM but wanted to find out if others are
getting this
> request from their auditors.
> 
> Our auditors want to be able to display the RSU or maintenance level of our
z/OS
> system.  To my knowledge, there is no way to do that (IBM has also agreed).
Does
> anyone know if this is possible and are you getting the same request from your
> auditors.? Keep in mind that our auditors do know z/OS or mainframe.  It
sounds like
> they are used to seeing displays on other platforms with this information with
> release and fix level.
> 
> Thank you in advance.
> 
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[John McKown]

On Wed, Sep 16, 2015 at 7:27 AM, Lopez, Sharon  wrote:

> I already posted this question to IBM but wanted to find out if others are
> getting this request from their auditors.
>
> Our auditors want to be able to display the RSU or maintenance level of
> our z/OS system.  To my knowledge, there is no way to do that (IBM has also
> agreed).  Does anyone know if this is possible and are you getting the same
> request from your auditors.? Keep in mind that our auditors do know z/OS or
> mainframe.  It sounds like they are used to seeing displays on other
> platforms with this information with release and fix level.
>
> Thank you in advance.
>

​z/OS is composed of many parts. What I might do would be to look at the
SOURCEID list for your z/OS target zone. And say something like: "We are on
z/OS 1.12 RSU 9912, plus a few (thousand) special patches"



>
>
>
>
> 
>
> Email correspondence to and from this address may be subject to the North
> Carolina Public Records Law and may be disclosed to third parties by an
> authorized state official.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>



-- 

Schrodinger's backup: The condition of any backup is unknown until a
restore is attempted.

Yoda of Borg, we are. Futile, resistance is, yes. Assimilated, you will be.

He's about as useful as a wax frying pan.

10 to the 12th power microphones = 1 Megaphone

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Bob Shannon]

We apply PUT maintenance, not RSU, but we have a usermod to update CVTVERID 
with maintenance level. If you did that you could give the auditors some Rexx 
code to display the value.

Bob Shannon
Rocket Software

Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ 
+1 800.966.3270 ■ +1 781.577.4321
Unsubscribe From Commercial Email – unsubscr...@rocketsoftware.com
Manage Your Subscription Preferences - 
http://info.rocketsoftware.com/GlobalSubscriptionManagementEmailFooter_SubscriptionCenter.html
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy


This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[J O Skip Robinson]

I have pitched this idea before. In a process that predates me in this shop, it 
was recognized that quite apart from auditors' poking around, we sysprogs 
needed a way to track a 'system package' at it migrated from one system to the 
next throughout the enterprise. The choice was to attach an arbitrary label to 
identify a particular *bundle* of maintenance that we would migrate stepwise 
from sandbox to production. The label looks like this

R##@

R is a constant, ## represents the OS release, and @ is letter that starts with 
A and get incremented for each new maintenance bundle. Currently we have R13@ 
for z/OS 1.13 and R21@ for z/OS 2.1. This label shows us at a glance which OS 
release a system is running, while the suffix allows us to track the migration 
of a particular bundle. We can easily tell which systems are at the same level, 
or which are up or down level if they're not the same. 

Once a bundle is ready for migration, we ZAP the new level into the nucleus in 
the user area. This is supported by a program/command that displays the level. 
Furthermore, we create members in text files like ISPF and OMVS that are easily 
viewed. The level can also be embedded in dataset names used for migration. 
Before we IPL a system at a new level, we run a Rexx that checks consistency 
among various components to verify that all relevant pieces have been migrated 
properly.  

This process has worked extremely well since the 1980s, before 'OS390' or 
'z/OS'. If you want something like this, you can start with the label. Then 
write some code to display it. Then build the label into a migration process. 
You can take it as far as you want.

As for auditors, they seem fixated on RACF and OMVS APARs. Something they must 
be taught in summer camp. The level strategy is really for us.  

.
.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lizette Koehler
Sent: Wednesday, September 16, 2015 7:10 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

Or another Technique could be to use the CVTUSER field.  Zap it with a Usermod 
to include the RSU with your live system
00D4  212 Signed   4 CVTUSER- FIELD AVAILABLE TO USER

Thought I do like the SYMBOLS option, but it is way too easy to change.  
Zapping the CVTUSER would take more effort and the USERMOD would remind you to 
do it.

Lizette


> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Blake, Daniel J [CTR]
> Sent: Wednesday, September 16, 2015 6:07 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> One more thing, IBM supplies the OS information for you using 
>   You cannot change it and you don't have to specify it in your 
> IEASYMxx member.
For us
> when we enter D SYMBOLS it's:  = "Z1020100".
> 
> 
> 
> ;-D an
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Blake, Daniel J [CTR]
> Sent: Wednesday, September 16, 2015 9:00 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> So give your auditors want they want using your IEASYMxx member.  Add 
> "SYMDEF(='.RSU1nnn')" to it and when they ask for your RSU 
> issue the "D SYMBOLS" command.  Just make sure nnn is your current RSU number.
> 
> 
> 
> ;-D an
> 
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Jousma, David
> Sent: Wednesday, September 16, 2015 8:30 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: RSU or maintenance level on a system
> 
> IBM is correct.  No way to do that.
> 
> _
> Dave Jousma
> Assistant Vice President, Mainframe Engineering david.jou...@53.com
> 1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p 616.653.8429 f
> 616.653.2717
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Lopez, Sharon
> Sent: Wednesday, September 16, 2015 8:28 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: RSU or maintenance level on a system
> 
> I already posted this question to IBM but wanted to find out if others 
> are
getting this
> request from their auditors.
> 
> Our auditors want to be able to display the RSU or maintenance level 
> of our
z/OS
> system.  To my knowledge, there is no way to do that (IBM has also agreed).
Does
> anyone know if this is possible and are you getting the sam

Re: RSU or maintenance level on a system

[Chris Hoelscher]

And having INSTALLED (even all) PTFs at a given RSU attribute does not mean 
they have been copied to a RUNTIME environment

So is there anything you COULD do?

Run AMBLIST against all runtime load modules - looking for PTF eyecatches in 
IDR if they exist - go to CSI - get the RSU attribute from the SYSMOD entry for 
those PTFd (ef they exist) - find the highest RSU and  there ya go ... (if your 
job depends upon providing this information) - I have never had this kind of 
auditor request for any products that I am responsible for ...  

Chris hoelscher
Technology Architect 
Database Infrastructure Services
Technology Solution Services

123 East Main Street
Louisville, KY 40202
choelsc...@humana.com
Humana.com
(502) 714-8615
(502) 476-2538


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of van der Grijn, Bart (B)
Sent: Wednesday, September 16, 2015 9:05 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: [IBM-MAIN] RSU or maintenance level on a system

There's no way to display it because there's not really such a thing as a 
defined maintenance level for a z/OS system. RSU is a collection of recommended 
PTFs for a selection of products. So what would be the definition of your 
system being at a RSU level? Does it imply all the maintenance? For all the 
components? For just z/OS or also for CICS, DB2, etc? Does it imply all the 
maintenance for the previous RSU levels? 
We don't always install all the RSU PTFs because some might be in error for 
reasons we care about. Does that mean we're not at that RSU level? 
I don't see an easy way to determine it programmatically, even if there was an 
agreed definition. 

I haven't seen that specific question, but have received similar questions (ex: 
'show us you have all security patches installed'). Our reply so far has been 
to explain the RSU process and show evidence of applying the RSU maintenance on 
a regular basis (through our internal change control tool).

Bart

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lopez, Sharon
Sent: Wednesday, September 16, 2015 8:28
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: RSU or maintenance level on a system

I already posted this question to IBM but wanted to find out if others are 
getting this request from their auditors.

Our auditors want to be able to display the RSU or maintenance level of our 
z/OS system.  To my knowledge, there is no way to do that (IBM has also 
agreed).  Does anyone know if this is possible and are you getting the same 
request from your auditors.? Keep in mind that our auditors do know z/OS or 
mainframe.  It sounds like they are used to seeing displays on other platforms 
with this information with release and fix level.

Thank you in advance.






Email correspondence to and from this address may be subject to the North 
Carolina Public Records Law and may be disclosed to third parties by an 
authorized state official.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material.  If you receive this 
material/information in error,
please contact the sender and delete or destroy the material/information.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Mark Zelden]

On Wed, 16 Sep 2015 15:50:20 +, Bob Shannon  
wrote:

>We apply PUT maintenance, not RSU, but we have a usermod to update CVTVERID 
>with maintenance level. If you did that you could give the auditors some Rexx 
>code
> to display the value. 

My last post mentioned IPLINFO for displaying what Skip was referring to.  This 
is
actually what IPLINFO will display if present.  

Mark
Best Regards / Mit freundlichen Grüßen,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS  
ITIL v3 Foundation Certified   
mailto:m...@mzelden.com   
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://search390.techtarget.com/ateExperts/
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Mark Zelden]

On Wed, 16 Sep 2015 15:42:19 +, J O Skip Robinson 
 wrote:

>I have pitched this idea before. In a process that predates me in this shop, 
>it was recognized that quite apart from auditors' poking around, we sysprogs 
>needed a way to track a 'system package' at it migrated from one system to the 
>next throughout the enterprise. The choice was to attach an arbitrary label to 
>identify a particular *bundle* of maintenance that we would migrate stepwise 
>from sandbox to production. The label looks like this
>
>R##@
>
>R is a constant, ## represents the OS release, and @ is letter that starts 
>with A and get incremented for each new maintenance bundle. Currently we have 
>R13@ for z/OS 1.13 and R21@ for z/OS 2.1. This label shows us at a glance 
>which OS release a system is running, while the suffix allows us to track the 
>migration of a particular bundle. We can easily tell which systems are at the 
>same level, or which are up or down level if they're not the same. 
>
>Once a bundle is ready for migration, we ZAP the new level into the nucleus in 
>the user area. This is supported by a program/command that displays the level. 
>Furthermore, we create members in text files like ISPF and OMVS that are 
>easily viewed. The level can also be embedded in dataset names used for 
>migration. Before we IPL a system at a new level, we run a Rexx that checks 
>consistency among various components to verify that all relevant pieces have 
>been migrated properly.  


My IPLINFO exec will display that information if present.   I added it years 
ago based on a user
that did what you do.   

Here is what I do:   For my IBM sysres (there is also an "ISV sysres" part of 
the complete sysres set), 
there is an uncataloged data set that we update.   A change log:


 BROWSE$$INFO.MAINT.HISTORY   Line  Col 0
 Command ===>  Scroll ===
* Top of Data ***
DATE  WHO  WHAT WAS CHANGED ON THE Z/OS 2.1 MAINTENANCE SYSRES   
  ---  - 
08/04/15  MSZ  Applied RSU maint up to RSU1506. About 245 PTFs went on.  
07/07/15  MSZ  Applied 32 additional z13 PTFs.   
04/22/15  MSZ  Applied RSU maint up to RSU1503. About 230 PTFs went on.  

Someone can look at the current / live sysres on any system and browse the data 
set to see
what is actually on that sysres.   As others do, we clone the SMP/E target zone 
along with
a sysres set, so if exact PTF details are needed one has to do an SMP/E query 
to find
out what sets the PTF is actually running on.   

My (maintenance) ISV sysres has something similar to the OS, but it is a PDS. 
There is a change log member ($$HIST) for anything touched on the maintenance 
ISV sysres and also a PDS member for every product whos name matches the
same identifier that is used in our data set naming convention:

-
BROWSE$$INFO.PRODUCTS
Command ===> 
   Name Prompt   
_ MIM
_ OMEGAMON   
_ PANSQL 
_ PSYNCH 
_ PWX


The individual product members are in addition to our other software doc we 
keep 
to simply identify what versionand maintenance level of a product is on a given 
sysres 
set (some times other relevant notes are added).   This is desired because 
during
roll out of maintenance or upgrades (done via rolling IPLs), some LPARs can be 
running
on a different maintenance level or release level of any given product just 
like operating
system maintenance.  This gives the team an easy way to identify
what is actually being used in the live environment for any given LPAR. 


  BROWSE$$INFO.PRODUCTS(MIM) - 11.17 
  Command ===>   
 * Top of Data **
 CA MIM: Release 12.1 SP0 + all PTFs a/o 07/07/2015  
  Bottom of Data 

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS  
ITIL v3 Foundation Certified   
mailto:m...@mzelden.com   
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://search390.techtarget.com/ateExperts/
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[Shmuel Metz (Seymour J.)]

In
,
on 09/16/2015
   at 12:27 PM, "Lopez, Sharon"  said:

>Our auditors want to be able to display the RSU or maintenance level
>of our z/OS system. 

Why? It won't tell the what service is applied.

>Keep in mind that our auditors do know z/OS or mainframe.

ITYM do NOT know.

>It sounds like they are used to seeing displays on other platforms
>with this information with release and fix level.

Maybe for m$; not in general.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RSU or maintenance level on a system

[J O Skip Robinson]

We may be zapping our label in NUC at an unconventional spot. IPLINFO does not 
show it. Here's what we see at IPL time. 

   IEA008I R13V   PARMS FOLLOW FOR z/OS 01.13.00 HBB7780

.
.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Zelden
Sent: Wednesday, September 16, 2015 9:19 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RSU or maintenance level on a system

On Wed, 16 Sep 2015 15:50:20 +, Bob Shannon <bshan...@rocketsoftware.com> 
wrote:

>We apply PUT maintenance, not RSU, but we have a usermod to update 
>CVTVERID with maintenance level. If you did that you could give the 
>auditors some Rexx code  to display the value.

My last post mentioned IPLINFO for displaying what Skip was referring to.  This 
is actually what IPLINFO will display if present.  

Mark
Best Regards / Mit freundlichen Grüßen,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS  
ITIL v3 Foundation Certified   
mailto:m...@mzelden.com   
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html
Systems Programming expert at http://search390.techtarget.com/ateExperts/


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN