----- Original Message -----
From: "Irwin M. Deutsch" <[EMAIL PROTECTED]>
Newsgroups: bit.listserv.ibm-main
Sent: Tuesday, September 13, 2005 3:12 PM
Subject: RACF Stop/Start?
Hi,
Our auditor has asked why have not protected the command to 'stop' racf.
Neither I nor our MVS gurus know of such an animal. I found some STOP for
RRSF in System Command manual, but that's just some part of RACF.
Any ideas on what our auditor is talking about?
Irwin,
To put it politely, the auditor is speaking from the rectum (from the Latin
"oratus rectumis"). It is not possible to stop RACF with a STOP command.
An RVARY command can inactivate the RACF database, but you need a password
to do that (shame on you if the password is still the default, use SETROPTS
to fix that). Even if you managed to "stop" RACF, it would go into
"failsafe" mode, and every RACROUTE gets a WTOR to the console which must be
verified by the system operator (you haven't lived until you hit "failsafe"
mode, it takes like 10 minutes to log on to TSO ;-) God save us from
auditors who can't find it with both hands and a flashlight.
Regards,
Tom Conley
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
