On Tue, Sep 13, 2005 at 02:24:59PM -0500, McKown, John ([EMAIL PROTECTED]) 
wrote:
> Your auditor is likely used to an ACF2 or TopSecret shop. If the ACF2 or
> TSS started task is not running, then your security system is down and
> things are nasty (I've done that too, I'm old and made many mistakes
> over the years). RACF does not have this vulnerability.

Seriously, that's a feature, not a "vulnerability".  Trying to fix
things when your RACF db is broken is damn near impossible.  Trying
to fix things when your ACF2 db is broken is just really aggravating.
There's a 2 orders of magnitude difference there.

Caveat:  The above is based on my experience with having been in both
situations, but long ago.  However, I have not heard anything since
which would lead me to believe that anything has changed.

With ACF2, you can stop the address space, fix the db, restart the
address space and you're running normally again.  Can this be done
with RACF?  With ACF2, you can stop it and restart immediately 
pointing to an alternate db with a different name on a different
volume.  Can you do this with RACF?


/Leonard

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to