Re: system level objects

2006-04-12 Thread Luis Correia
Hi Lizette, Your right.. i think it's due to my inexperience in Z/OS. The answers are 1. Z/OS 1.4 2. RACF 3. I must test a control that says: Ensure that the creation / deletion of all system objects is logged. Until now I consider datasets and TCP connections, for both systems objects I've the

system level objects

2006-04-11 Thread Luis Correia
Hi to you all! From a security perspective I have to evaluate if the creation of system level objects is being logged. My question is, beside the datasets and TCP connections that are logged, what other type of system level objects should I consider ?? Thanks in advanced! -- Cumprimentos, Luís

backup log files

2006-04-11 Thread Luis Correia
Hi, Can anyone tell me if its tecnhical feasible and if yes what are the impacts of promptly backup log files to a centralised log server or media? Thanks! -- Cumprimentos, Luís Correia -- For IBM-MAIN subscribe / signoff /

[no subject]

2006-04-08 Thread Luis Correia
Hi to you all. does anyone know what is ac#cmd resource class. thanks in advanced. -- Cumprimentos, Luís Correia -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the

SMFPRM

2006-03-29 Thread Luis Correia
Hi to you all, in the SMFPRM I found the following: SYS(NOTYPE(14:19,62:69,99),EXITS(IEFU83,IEFU84,IEFACTRT, IEFUSI,IEFUJI,IEFU29),NOINTERVAL,NODETAIL) /* WRITE ALL EXCEPT DATA MANAGEMENT RECORDS, TAKE EXITS. */ What type of events are not being logged ? Who, when, type of

authentication mechanism

2006-03-28 Thread Luis Correia
Hi ! Is there a way of log the type of connection that a user made to connect to z/OS ? Does the authentication mechanism used get logged ? Thanks ! -- Cumprimentos, Luís Correia -- For IBM-MAIN subscribe / signoff / archive

latest PUTyymm

2006-03-21 Thread Luis Correia
Hi to you all! Can anyone tell me what is the latest PUTyymm for Z/OS V1.4 ? Thanks in advanced ! -- Regards/ Cumprimentos, Luís Correia -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL

installed components

2006-03-17 Thread Luis Correia
Hi to you all! Is there a way to see all the products/components that are installed in z/OS ? Thanks in advanced... -- Regards / Cumprimentos, Luís Correia -- For IBM-MAIN subscribe / signoff / archive access instructions,

permissions and user list sys1.man1

2006-03-15 Thread Luis Correia
Hi to you all! This is my fist post to this list. I'm playing with z/OS, and I know that the smf data sets are sys1.man1. How can I see what are the users who access and their permissions to sys1.man1 Thanks -- Regards / Cumprimentos, Luís Correia

SMF data sets access

2006-03-15 Thread Luis Correia
Hi to you all! This is my fist post to this list. I'm playing with z/OS, and I know that the smf data sets are sys1.man1. How can I see who are the users who access and their permissions to sys1.man1 Thanks in advanced! -- Cumprimentos, Luís Correia

Re: SMF data sets access

2006-03-15 Thread Luis Correia
For a list of authorized users the universal access (UACC) -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Luis Correia Sent: Wednesday, March 15, 2006 10:50 AM To: IBM-MAIN@BAMA.UA.EDU Subject: SMF data sets access Hi to you all

Re: permissions and user list sys1.man1

2006-03-15 Thread Luis Correia
Thanks Alan! In fact I don't have experience in mainframe...i'm more a unix guy! The system where i'm working have RACF. Expect some more basic/stupid questions... On 3/15/06, Alan C. Field [EMAIL PROTECTED] wrote: Luis, This sounds like a question based in Unix terms. Access to

SMF type(255)

2006-03-15 Thread Luis Correia
This is was in the smfprm SUBSYS(SLSP,INTERVAL(003000),TYPE(255)) SUBPARM(SLSP(SUBTYPE(1,2,3,4,5,6,8))) I've looked around and i can't find what type(255) means ? Can anyone please tell me? Thanks in advanced! -- Cumprimentos, Luís Correia

Re: SMF type(255)

2006-03-15 Thread Luis Correia
Thanks! I will look for it... On 3/15/06, Ted MacNEIL [EMAIL PROTECTED] wrote: I've looked around and i can't find what type(255) means ? Can anyone please tell me? Any record type above 127 is a 'user' record. IE: from an ISV, usually. While there are conventions, there are no true

Re: SMF type(255)

2006-03-15 Thread Luis Correia
Thanks! On 3/15/06, Alan C. Field [EMAIL PROTECTED] wrote: This says for subsystem SLSP ( which I guess is the STK subsystem to run the tape SILO, we call ours SLS0) cut an SMF record every 30 minutes. In the SLSP setup ypu define what SMF record number to use (in this case the STK default

irrdbu reveals passwords ?

2006-03-15 Thread Luis Correia
last question for today... If execute the irrdbu command I will have all the content of the racf database...will this include any clear text passwords? Thanks in advanced -- Cumprimentos, Luís Correia -- For IBM-MAIN

Re: SMF data sets access

2006-03-15 Thread Luis Correia
Thanks! On 3/15/06, R.S. [EMAIL PROTECTED] wrote: Luis Correia wrote: Hi to you all! This is my fist post to this list. False. Your first post was sent 22 minutes earlier vbg Nevermind, WELCOME! I'm playing with z/OS, and I know that the smf data sets are sys1.man1 . How can I