eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

Tracing UNIX System Services (OMVS)Service Field valuesPossible values for the SERVICE field of the TSSOERPT report follows.Additional information that can appear on the report for each request when theDETAIL option is specified is a function of the particular call being made is alsoprovided.AUDIT—A record cut in addition to a security service record; it suppliesadditional information about the file being audited. For more information, seethe Security Credentials and File Security Packets section of this document.CHANGE_AUDIT_OPT—Indicates that a file's Audit Options have beenchanged.■■User Audit Options—Indicates the type of user access to this file that shouldbe audited.Auditor Audit Options—Indicates the type of auditor access to this file thatshould be audited.CHANGE_FILE_MODE—Indicates a file's permissions (mode) have beenchanged.■■File Type—The file type of the file whose permissions are being changed. Itindicates if a file is a directory, a regular file, or one of several special types offiles.File Permissions—The file access permissions assigned to the indicated file.These are displayed in the fields named Owner, Group, and Other. Valuesfor the fields are r for READ, w WRITE, x for EXECUTE, and s for SEARCH.CHANGE_OWNER_GRP—Changes a file's owning UID and GID to a newvalue.■■UID To Be Set— Changed UID number of the file's owning UID.GID To Be Set—Changed GID number of the file's owning GID.CHECK_ACCESS—Determines if a user has the requested access (READ,WRITE, EXECUTE or SEARCH) to the specified file or directory.CHECK_FILE_OWNER—Checks if a current process is a superuser or the ownerof the specified file. A process could be the owner of a file if the effective UID isequal to the file owner's UID.CHECK_PRIVILEGE—Determines if the calling process is a superuser.CHK_PROCESS_OWNR—Checks to see if the calling process is the owner of aprocess being called.CLEAR_SETID—Clears temporary access that has been given to a file ordirectory (i.e., resets the S_ISUID, S_ISGID and S_ISVTX bits in the file's ordirectory's access permissions back to zero.DELETE_USP—Indicates that the user's access to UNIX System Services MVSterminated.Implementing eTrust CA-Top Secret in a z/OS or OS/390 Environment 1–25