On Tue, 7 Oct 2008 13:50:21 -0500, Mark Zelden <[EMAIL PROTECTED]> wrote:

>On Tue, 7 Oct 2008 14:36:29 -0400, Scott Rowe <[EMAIL PROTECTED]> wrote:
>
>>I make it a point NOT to have a PASSWORD dataset on my sysres.  I consulted
>at a shiop a few years ago that had one, and it was a PITA, since they were
>securing some datasets with password, and others using RACF, believe it or not.
>>
>
>If they had RACF then nothing was being secured with PROTECT.

Password protection should still work on systems using RACF, except for:
(a) SMS-managed or VSAM data sets; and
(b) data sets protected by (really, known to) RACF.

Actually both (a) and (b) apply regardless of security product, as far as I
know.

-- 
  Walt Farrell, CISSP
  IBM STSM, z/OS Security Design
-

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to