IBM OS/390 manual Direction, Facility, Directory, Data Security, Data Set

DATASET

classes. The table is generated

by

execresoutingrce

serialization

protocol

that

allows

concurrent

the ICHERCDE macro once for each

class.

The RACFclassinstances

to

directly

access

and

change

the

descriptor

table

contains

both

the

IBM

providedsame

databaseclasses

while

maintaining

data

integrity

as

and

also

the

installation

defined

classes.

always.

Data

sharing

mode

requires

installation

of

CLAUTH

.

Seeclass

authority.

coupling

facility

hardware.

command

direction

default

group

.

In

RACF,

the

group

specified

in

a

use

.

A

RRSF

function

that

allows

a

connect

group.

profile that is the default current

user to issue a command

from

one

user

ID

and

direct

that

command

to

run

under

the

authority

of

DEFINEa differentrequest

.

The

issuing

of

the

RACROUTE

user ID

on

the

same

or

a

different

RRSF

nodemacro.

withBeforeREQUEST=DEFINE

specified.

Also,

using

a

a command can be directed from

one

user

IDRACF tocommand

to

add

or delete a resource profile

another,

a

user

ID

association must

be

definedcausesbetweenaDEFINE

request.

The

DEFINE

request

them

via

the

RACLINK

command.

replaces

the

RACDEF function.

command

interpreter

.

A

program

that

reads

theDFP .

See

Data

Facility

Product.

commands

that

you

type

in

and

then

executes

them.

When

you

are

typing

commands

into

the

DFP

segment

.

The

portion

of

a

RACF

profile

computer,

you

are

actually

typing

input

to

the

command

containing

information

relating

to

the

users

and

interpreter.

The

interpreter

then

decides

how

to

resources

that

are

managed

by the

data

facility

p

perform

the

(DFP).

commands that you have typed. The shell is an

example of a command interpreter. Synonymous with

command

language

interpreter. See

alsohell.

DIRAUTH

request

.

The

issuing

of

the

RACROUTE

macro with REQUEST=DIRAUTH specified. A

command

language

interpreter

.

Synonym

for

DIRAUTH

request

works

on

behalf

of

the

command

interpreter.

message-transmission

managers

to

ensure

that

the

receiver

of a message meets security-label

coupling

facility

.

The

hardware

element

that

providesauthorization

requirements.

high-speed caching, list processing, and locking

functions

in

a

sysplex.

directed

command

.

A

RACF

command

that

is

issued

from a user ID on

an RRSF node. It runs in the RA

D

subsystem

address space on the same or a

differen

RRSF

node

under

the

authority

of

the

same

or a

Data

Facility

Product

(DFP)

different

user

ID.

A

directed

command

is

one

that

.

A

program

that

isolates

AT or ONLYAT. Seecommandlso direction

applications

from

storage

devices,

storage

specifies

and

automatic

command

direction.

management, and storage device hierarchy

management.

directory .

(1) A type of file containing the names an

data

security .

The protection of data from

controlling

information

for other files or other direc

(2) A

construct

for

organizing

computer

files.

As

file

unauthorized

disclosure,

modification,

or

destruction,

whether

accidental

or

intentional.

are analogous to folders that hold information, a

directory

is analogous to a drawer that can hold a

data

security

monitor

(DSMON)

.

A

RACF

auditing

number

of

folders.

Directories

can

also

contain

subdirectories, which can contain subdirectories

of

tool

that

produces

reports

enabling

an

installation

to

file

that

contains

directory

entries.

No

t

verify

its

basic

system

integrity

and

own.

(3) A

data-security

controls.

directory entries in the same directory can have t

same name. (4) A file that points to files and to ot

data

set

profile

.

A

profile

that

provides

RACF

directories.

(5) An

index used

by

a

control

program

t

locate

blocks of data that are stored in separate

protection for

one

or

more

data

sets.

The

information

in

set in

direct

access

storage.

of

a

data

the profile can include the data-set profile

name,

profile

owner,

universal

access

authority,

access

list,

and

other

A

resource

profile

that

can

provide

data.

Seediscrete

profileandgeneric

profile.

discrete

profile

.

RACF protection for only a single resource. For

data

sharing

mode

.

An

operational

RACF

mode

example,

a

discrete

profile

can

protect only

a

singl

that

set

or

minidisk.

data

is available when RACF is enabled for sysplex

communication.

Data

sharing

mode

uses

global

DSMON

.

Seedata

security

.monitor

40 OS/390 V2R4.0 Security Server (RACF) Planning: Installation and Migration