During the writing of the first edition of the zSecure RedBook (first edition 
2008) SG24-7633-01 we started with a standard z/OS image from the IBM Raleigh 
teams, who maintain and build the images for the ADCD systems also, and 
documented all steps necessary to bring the system up to a reasonable 
definition of modern RACF usage.  We handed this information to the build team, 
and I offered to personally assist them in changing their processes to make 
these changes part of the standard build.  At the time I was also responsible 
for delivering z/OS based education for the IBM Academic Initiative also using 
the same z/OS images as the base for their systems.  It was not a secure system 
by a long shot, and I understand nothing much has changed in that respect since 
we tried to help.  There was no interest in doing this from the Raleigh teams 
and nothing came from these efforts.

Lennie, you know me, I would be delighted to see the documented procedures 
you've described be distributed and available for others to benefit from.  In a 
sense, that was one of my main motivations behind creating the zSecure RedBook 
in the form it took, to help people build better and more readily maintainable 
RACF implementations.

Cheers - Mike

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to