eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

More documents

Recommendations

Info

HFSSEC Control OptionUNIX CMDEXTERNALLINKHFSSEC(ON)EXTERNALLINKHFSSEC(OFF)SYMBOLICLINKHFSSEC(ON)SYMBOLICLINKHFSSEC(OFF)SWITCH USER(SU)HFSSEC(ON)SWITCH USER(SU)HFSSEC(OFF)TSSUTIL Sample OutputDATE TIME SYSID ACCESSOR JOBNAME FACILITY MODE VCPROG01/18/00 10:11:32 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : IBMFAC BPX.CAHFS.CREATE. EXTERNAL.LINK01/18/00 10:11:32 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : HFSSEC /U.OMVSPT1.ALTERTEST3DATE TIME SYSID ACCESSOR JOBNAME FACILITY MODE VCPROG02/01/00 11:31:28 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : UNIXPRIV SUPERUSER.FILESYS.FILE02/01/00 11:31:28 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE:USSLOGRES=CHECK_ACCESS /u/omvspt1/linktestDATE TIME SYSID ACCESSOR JOBNAME FACILITY MODE VCPROG01/18/00 12:12:20 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : IBMFAC BPX.CAHFS.CREATE.SYMBOLIC.LINKDATE TIME SYSID ACCESSOR JOBNAME FACILITY MODE VCPROG02/01/00 11:47:36 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : UNIXPRIV SUPERUSER.FILESYS.FILE02/01/00 11:47:36 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE:USSLOGRES=CHECK_ACCESS /u/omvspt1/linktestDATE TIME SYSID ACCESSOR JOBNAME FACILITY MODE VCPROG02/03/00 11:06:05 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : IBMFAC BPX.SUPERUSER02/03/00 11:06:05 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : USSLOG R_SET_EUIDDATE TIME SYSID ACCESSOR JOBNAME FACILITY MODE VCPROG02/03/00 11:06:05 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : IBMFAC BPX.SUPERUSER02/03/00 11:06:05 XE14 OMVSPT1 OMVSPT1 TSO WARNRESOURCE TYPE & NAME : USSLOG R_SET_EUID2–18 Cookbook
HFSSEC Control OptionTSSSUTIL EQUIVILENCY TABLEUNIX CMDKILLHFSSEC(ON)KILLHFSSEC(OFF)EXTATTR(CHG. ATTR.)HFSSEC(ON)EXTATTR(CHG. ATTR.)HFSSEC(OFF)EXTATTR(PROG. CNTL.ATTR.)HFSSEC(ON)EXTATTR(PROG. CNTL.ATTR.)HFSSEC(OFF)TSSOERPT Sample OutputOMVS LOGGING REPORTSERVICE USERID GROUP UID GID SAF RC RSN DATETIME JOBNAME SOURCE SYSID CPUFunction: Purge Attribute flags: 00000000 Userid: Applid:Password: NO Certificate: NO ACEE Addr: NOINIT_USP OMVSPT1 OMVSGRP1 777 777 0 0 002/02/00 00.033 09:59:16 OMVSPT1 XE14 XE14OMVS LOGGING REPORTSERVICE USERID GROUP UID GID SAF RC RSN DATETIME JOBNAME SOURCE SYSID CPUDELETE_USP OMVSPT1 OMVSGRP1 0 0 0 0 002/02/00 00.033 10:53:15 OMVSPT1 XE14 XE14INIT_ACEE OMVSPT1 OMVSGRP1 0 0 0 0 002/02/00 00.033 10:53:15 OMVSPT1 XE14 XE14Function: Purge Attribute flags: 00000000Userid:Applid:Password: NO Certificate: NO ACEE Addr: NOOMVS LOGGING REPORTSERVICE USERID GROUP UID GID SAF RC RSN DATETIME JOBNAME SOURCE SYSID CPU GET_GMAP OMVSPT1 OMVSGRP1 777777 0 0 002/02/00 00.033 09:41:41 OMVSPT1 XE14 XE14OMVS LOGGING REPORTSERVICE USERID GROUP UID GID SAF RC RSN DATETIME JOBNAME SOURCE SYSID CPURequested Access: WriteFunction: chattrUser Type: Security Defined Local UserPathname: u/omvspt1/altertest1Filename: altertest1Volume : SMS001 Owner: rwx Group: r-- Other: ---File Identifier: 00010B00000FA40000Owning UID: 777 Owning GID: 777User Audit Options : Read Success Write Success Exec/Search FailureAuditor Audit Options: Read None Write None Exec/Search NoneOMVS LOGGING REPORTSERVICE USERID GROUP UID GID SAF RC RSN DATETIME JOBNAME SOURCE SYSID CPUGET_GMAP OMVSPT1 OMVSGRP1 777 777 0 0 002/02/00 00.033 09:46:11 OMVSPT1 XE14 XE14OMVS LOGGING REPORTSERVICE USERID GROUP UID GID SAF RC RSN DATETIME JOBNAME SOURCE SYSID CPURequested Access: WriteFunction: chattrUser Type: Security Defined Local UserPathname: u/omvspt1/altertest1Filename: altertest1Volume : SMS001 Owner: rwx Group: r-- Other: ---File Identifier: 00010B00000FA40000Owning UID: 777 Owning GID: 777User Audit Options : Read Success Write Success Exec/Search FailureAuditor Audit Options: Read None Write None Exec/Search NoneControlling Access to the Hierarchical File System 2–19
Page 1 and 2:
eTrust CA-Top Secret ® Securityfo
Page 3:
Technical UpdatesMay 2003The follow
Page 6 and 7:
Superuser Granularity .............
Page 8 and 9:
WLM (Workload Management)..........
Page 11 and 12:
Chapter1Implementing eTrust CA-TopS
Page 13 and 14:
z/OS and OS/390 CompatibilityThe li
Page 15 and 16:
z/OS and OS/390 Release-Specific Se
Page 17 and 18:
OpenEdition MVS / UNIX System Servi
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Tracing UNIX System Services (OMVS)
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Using TCP/IPFILE AUDIT OPTIONS—Th
Page 41 and 42:
Using TCP/IPwheresysname is the nam
Page 43 and 44:
Using FTPHow to Secure FTPFTP runs
Page 45 and 46:
Using TELNETTerminal Source Restric
Page 47 and 48:
WebSphere Application Server for z/
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Lotus Domino Go Webserver/* PERMITT
Page 59 and 60:
Lotus Domino Go WebserverTo disable
Page 61 and 62:
Lotus Notes and Novell Directory Se
Page 63 and 64:
Digital Certificate SupportGeneral
Page 65 and 66:
Digital Certificate SupportFOR|UNTI
Page 67 and 68:
Digital Certificate SupportDCDSN(re
Page 69 and 70:
Digital Certificate SupportNote: In
Page 71 and 72:
Digital Certificate SupportYou can
Page 73 and 74:
Digital Certificate SupportCase #2.
Page 75 and 76:
Digital Certificate SupportImportan
Page 77 and 78: Digital Certificate SupportAdding a
Page 79 and 80: Digital Certificate SupportReconnec
Page 81 and 82: Digital Certificate SupportTSS LIST
Page 83 and 84: Certificate Name Filtering SupportT
Page 85 and 86: Certificate Name Filtering SupportI
Page 87 and 88: Certificate Name Filtering SupportD
Page 89 and 90: Certificate Name Filtering SupportL
Page 91 and 92: KerberosKerberosetrust CA-Top Secre
Page 93 and 94: KerberosThe command syntax for this
Page 95 and 96: KerberosThe following command creat
Page 97 and 98: Mapping of Foreign EnvironmentsMapp
Page 99 and 100: Mapping of Foreign EnvironmentsMapp
Page 101 and 102: Distributed File Server SMB SUPPORT
Page 103 and 104: NFS (Network File System)The first
Page 105 and 106: z/OS and OS/390 Security Server Sup
Page 111 and 112: Chapter2Controlling Access to theHi
Page 113 and 114: Controlling HFS Using the Native UN
Page 115 and 116: Controlling HFS Using CA SAF HFS Se
Page 117 and 118: Securing HFS FunctionsKeywordALLCON
Page 119 and 120: Securing HFS FunctionsFile Function
Page 121 and 122: Implementing CA SAF HFS SecurityImp
Page 123 and 124: HFSSEC Control Option+12—The addr
Page 125 and 126: HFSSEC Control OptionDiagnosticsThe
Page 127: HFSSEC Control OptionUNIX CMDCHMOD(
Page 131 and 132: HFSSEC Control OptionUNIX CMDS ACCE
Page 133 and 134: HFSSEC Control OptionExample 1// JO
Page 135 and 136: HFSSEC Control OptionExample 2// JO
Page 137 and 138: MessagesMessagesCAS2301EEVENT PROCE
Page 139 and 140: MessagesCAS2306Wxxxxxxxxxxxxxxx EVE
Page 141: MessagesCAS2319ITRACEID=aaaaaaaa US
Page 144 and 145: The SYSPLEX XES FunctionThere are t
Page 146 and 147: eTrust CA-Top Secret and the SYSPLE
Page 148 and 149: Defining the Sysplex to eTrust CA-T
Page 150 and 151: Managing the Coupling FacilityWhen
Page 152 and 153: Defining SYSTEM LOGGER to eTrust CA
Page 154 and 155: IMVSECUR/*=========================
Page 156 and 157: IMVSECUR/*=========================
Page 158 and 159: IMVSECURFeature RACF eTrust CA-Top
Page 160 and 161: PERMITIn eTrust CA-Top Secret, all
Page 163 and 164: Indexcomponent names for z/OS and O
Page 165 and 166: OpenEdition MVS supportACIDs needed
show all

eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?